Privacy Policy

1. Information We Collect

When You Use Our Service (No Account)

We collect minimal data to perform the speed test:

Data Type	Why We Collect It	Retention
IP Address	To select the best test server near you	Session only (not stored)
Speed Test Results	To show you your results and calculate averages	Anonymous, 90 days
Browser Type	To ensure compatibility and fix bugs	Aggregated, anonymous
Approximate Location	City/country level for server selection	Not stored individually

When You Create an Account

If you register for an account, we additionally collect:

• Email Address - For login and important notifications
• Password - Encrypted and never stored in plain text
• Test History - Your past speed tests associated with your account
• Account Preferences - Language, theme, notification settings

What We DON't Collect

We explicitly do NOT collect:

• ❌ Your browsing history
• ❌ Your contacts or social connections
• ❌ Precise GPS location
• ❌ ISP credentials or billing information
• ❌ Content of your internet traffic
• ❌ Personal documents or files

2. How We Use Your Data

We use collected data only for these purposes:

Service Delivery

• Performing accurate speed tests
• Showing you your test results and history
• Selecting optimal test servers
• Providing PDF and image exports

Service Improvement

• Calculating average speeds (anonymized)
• Fixing bugs and improving performance
• Understanding usage patterns (aggregate only)

Communication (Account Holders Only)

• Password reset emails
• Important service updates
• Optional: Monthly test summary (you can opt out)

3. Your Data Rights (GDPR & CCPA Compliant)

You have comprehensive rights over your data:

Right to Access

Download all your data in machine-readable formats (JSON, CSV) at any time.

Right to Deletion ("Right to be Forgotten")

Delete individual test results, your entire test history, or your complete account. We'll permanently erase your data within 30 days.

Right to Portability

Export your data in common formats to use with other services.

Right to Rectification

Update or correct your email or any account information anytime.

Right to Restriction

Archive your account to stop data collection while preserving your data.

Right to Object

Opt out of any non-essential data processing or communications.

4. Data Sharing & Third Parties

We Never Sell Your Data

We do NOT and will NEVER sell, rent, or trade your personal information to anyone.

Limited Third-Party Sharing

We only share data with these trusted third parties:

Service	Purpose	Data Shared
Google OAuth	Login authentication (optional)	Email (if you use Google sign-in)
GitHub OAuth	Login authentication (optional)	Email (if you use GitHub sign-in)
Cloud Hosting	Service infrastructure	Technical data only (encrypted)
Email Service	Transactional emails only	Email address (for registered users)

Legal Obligations

We may disclose data only if:

• Required by valid legal process (subpoena, court order)
• Necessary to prevent harm or illegal activity
• With your explicit consent

We'll notify you unless legally prohibited.

5. Data Security

We protect your data with industry-standard security measures:

Technical Safeguards

• 🔐 Encryption: HTTPS for all connections, encrypted database storage
• 🔑 Password Security: Bcrypt hashing with salt (never plain text)
• 🛡️ Access Control: Strict internal access policies
• 🔄 Regular Backups: Encrypted backups with 30-day retention
• 🚨 Monitoring: 24/7 security monitoring and intrusion detection

Data Breach Protocol

In the unlikely event of a data breach:

• We'll notify affected users within 72 hours
• We'll disclose what data was affected
• We'll provide steps to protect yourself
• We'll report to relevant authorities as required

6. Cookies & Tracking

Essential Cookies

Required for the service to function:

• Session Cookie: Keeps you logged in
• CSRF Token: Security protection
• Language Preference: Remembers your language choice
• Theme Preference: Light/dark mode setting

Analytics (Optional)

We use minimal analytics to improve the service:

• Aggregate usage statistics (not personally identifiable)
• Error tracking to fix bugs
• Performance monitoring

You can opt out of analytics in your privacy settings.

No Third-Party Trackers

We do NOT use:

• ❌ Facebook Pixel
• ❌ Google Analytics (we use privacy-focused alternatives)
• ❌ Advertising trackers
• ❌ Social media tracking scripts

7. Children's Privacy

Our service is not directed at children under 13. We don't knowingly collect data from children. If we discover we've collected data from a child under 13, we'll delete it immediately.

If you're a parent and believe your child provided us information, contact us at hello@internetspeed.my.

8. International Data Transfers

Your data may be processed in different countries, but we ensure:

• Compliance with GDPR (for EU users)
• Compliance with CCPA (for California users)
• Standard Contractual Clauses for international transfers
• Data residency options (contact us for enterprise needs)

9. Data Retention

Data Type	Retention Period	After Deletion
Anonymous Test Results	90 days	Permanently deleted
Account Test History	Until you delete or close account	30 days in backups, then permanent deletion
Account Information	Until account deletion	30 days grace period, then permanent deletion
Login Activity	90 days (security)	Anonymized after 90 days

10. Changes to This Privacy Policy

We may update this policy occasionally. When we do:

• We'll update the "Last Updated" date at the top of this page
• For material changes, we'll email registered users 30 days in advance
• We'll maintain a record of previous versions for transparency
• Continued use after changes means acceptance

11. Your Questions & Rights

Contact Our Privacy Team

Questions about your privacy or want to exercise your rights?

• 📧 Email: hello@internetspeed.my
• 📝 Privacy Request Form: Submit Request: Submit Request
• ⏱️ We respond within 48 hours

File a Complaint

If you're not satisfied with our response, you have the right to file a complaint with:

• EU Users: Your local Data Protection Authority
• California Users: California Attorney General's Office
• Other Regions: Your local privacy regulator