Privacy

The short version

• The test runs in your browser against Cloudflare, and measures the traffic between them.
• Cloudflare sees your IP address as the other end of that connection, as any website does.
• We do not send Cloudflare a report of your results, and we do not store your results or your IP address.
• We cannot say what logs Cloudflare itself keeps about the connection — see their privacy policy.

What we store

There is no account, no login and no database record of your test. Your diagnostic answers and exact results stay in your browser for the visit.

• Your results are held in your browser for the length of your visit and are not sent to us or saved anywhere.
• We do not persist your IP address. Persisting result: no. Persisting IP address: no.
• Diagnostic result retention: nothing is retained, so there is no period.
• Anonymous analytics are optional and off until you actively allow them. Clearly labelled affiliate recommendations may appear on relevant pages whether or not analytics are allowed; the choice only controls our measurement of the journey.

Anonymous analytics, if you allow it

We use consent as the basis for this optional measurement. If you choose “Allow anonymous analytics”, your browser may send our own server a bounded event when a tracked page is viewed, a tool finishes, an affiliate link is opened, or an outbound redirect works or is refused. There is no analytics vendor and these records are not shared with an advertiser.

Each stored contribution contains only the UTC date, the event type and relevant labels chosen by us, such as a page, tool, pillar, offer, placement, category or closed refusal reason. For a landing event, a raw campaign query and referrer are reduced in the browser to one of our published source and campaign labels; the URL query and referrer themselves are discarded. A contribution contains no exact time, visitor or session ID, cookie value, form entry, diagnostic measurement, destination URL, IP address, user agent or referrer. The incoming network address is used transiently for abuse control, converted immediately to a secret-keyed value held in memory, and never reaches the journal or report.

The private daily source journals are automatically deleted after 31 days. An operator can reduce one day into totals by the safe labels above; the report cannot reconstruct a visit or identify a person because the source has no join key. You can withdraw at any time on the cookie and tracking settings page. Withdrawal stops new collection immediately.

What the measurement provider sees

The test works by moving real data between your browser and speed.cloudflare.com. That traffic has to reach them for the measurement to exist at all, so they see your connection as its other end — exactly as every website you visit does.

Below is what we know about their side, and how well we know it. Where we have not verified something, it says so.

• We checked this ourselvesSees your IP address: YesMeasurement traffic necessarily reaches speed.cloudflare.com, so Cloudflare observes the connection as its counterparty — as does any server a browser contacts.
• We checked this ourselvesWe send them a report of your results: NoConfigured with logAimApiUrl and logMeasurementApiUrl set to null. The library would otherwise post results to speed.cloudflare.com/__results by default. Verified on the wire that no such request is made (Spike 0001).
• The vendor documents this; we have not independently verified itPublishes measurement data: NoCloudflare does not publish individual measurements the way M-Lab does. With result reporting disabled we send nothing that could be published. Per their privacy policy; not independently verified.
• We do not knowTheir own retention: Not knownWe have no evidence about whether Cloudflare retains connection or security logs for measurement traffic reaching its edge. Most networks keep some. We make no claim either way, and must not present this as "no data retained".

The thing we will not claim

A lot of sites would take “we keep no diagnostic result” and present it as though it covered the other end of the connection too. Those are not the same statement. We have verified that we keep no test result or raw IP in the analytics journal, and that we have switched off the optional reporting of your results back to Cloudflare. We have no evidence either wayabout whether Cloudflare keeps connection or security logs for traffic reaching its edge — most networks keep some.

So we do not say they keep nothing. If that matters to you, their privacy policy is the authority on it, not us.

If you would rather not contact a third party at all

You do not have to run our test. Every diagnostic tool here accepts figures you have measured elsewhere, and the package speed check works entirely from numbers you type in. Nothing leaves your device on that route.

Cookies

The site sets one first-party preference cookie after you make a choice. It records the four yes/no purpose choices, the consent-policy version and when the choice was made. It lasts for up to twelve months, is not shared with an analytics vendor, and can be deleted with “Forget my choice” on the settings page. We set no analytics cookie and load no third-party analytics or advertising script.

Who is responsible, and how to reach us

Circle Utility is a trading name of Prestige Access Limited, registered in England and Wales. That company is the data controller for anything described on this page.

Changes

The speed-test provider details above are generated from the same privacy configuration the measurement code uses, so that section changes when the provider behaviour changes. The separate analytics description documents Circle Utility's own bounded implementation and is reviewed with its feature switch and consent policy before activation.