Privacy Policy
Version 0.9 · Effective 19 September 2026 · Internet Speed Test
This notice explains who operates Internet Speed Test, what personal data is processed when you load the UI or run a measurement, and what is never stored next to a result.
English is the operative language of the Service. Sari la varianta în limba română.
1. Who we are
The controller for personal data processed in connection with this Service is Jungean-Herman Marius-Alexandru, acting under the public name Alexandru Jungean. The operator is a natural person established in Romania.
- Service: Internet Speed Test at https://speed.alexjungean.com
- Measurement origin: https://speed-measure.alexandrujungean.workers.dev
- Contact: alex.jungean@gmail.com
- Portfolio: https://alexjungean.com
- See also the Legal Notice and the Terms of Use.
This Service has no accounts, no customer database, and no employee team. Correspondence is read by the operator.
2. Scope
This Privacy Policy applies to the public information-society service at https://speed.alexjungean.com and to test traffic sent to https://speed-measure.alexandrujungean.workers.dev. It covers personal data processed when you visit the pages, when a test runs, when you write to the contact address, and when public search tools index the pages.
It does not cover https://alexjungean.com, GitHub, Netlify’s own platform accounts,Cloudflare’s own platform accounts, or any other website.
Under Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018, the operator is the controller of the limited personal data described here.
3. What the Service does
Internet Speed Test is a browser speed test. The UI is a static Next.js site hosted by Netlify. Throughput is not implemented inside a Netlify Function. Start opens a short-lived session and measures download throughput against a Cloudflare Worker at https://speed-measure.alexandrujungean.workers.dev. The public download payload is 25 MiB (Workers Free static asset), after a 3 MiB warmup and one discarded 25 MiB lap. Upload uses sequential 1 MiB POSTs (48 MiB or 8 s) so discard stays inside the Free 10 ms CPU budget. Mbps and HTTP round-trip latency are computed in this browser from those transfers.
The Service does not:
- create accounts or save a result history on a server;
- name your ISP, detect a VPN, or compare you with neighbors;
- claim a certified, regulator, or multi-server ISP-lab result;
- fetch a URL you supply (it is not an open proxy);
- send Mbps, ms, or raw test samples to a third-party analytics script.
4. Categories of personal data
| Category | Examples | Source | Stored next to a result? |
|---|---|---|---|
| Connection data (UI) | IP address, date and time, requested URL, HTTP status, user-agent, referrer if sent | Created when your browser requests the static pages from Netlify | No. We do not operate a result store. |
| Connection data (measurement) | IP address seen as CF-Connecting-IP, colo label, request path | Created when a live test hits https://speed-measure.alexandrujungean.workers.dev | No. Throughput is not written next to the IP or its hash. |
| Rate-limit key | HMAC-SHA256 hash of the client IP (truncated), daily count | Derived inside the Worker; raw IP is not written to KV | No. The hash is a counter key only. |
| Search-property data | Crawl, impression, and query data about the public pages | Search Console for the speed subdomain | No |
| Correspondence | Your email address, message text, and attachments you choose to send | You, if you write to the contact address | Only if you attach them |
| On-page results | Download Mbps, upload Mbps, latency ms, colo label | Computed in this browser after a test | Not received as a stored result. They stay in page memory. |
The Service does not collect accounts, passwords, payment data, marketing lists, or precise geolocation.
5. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Deliver the static site and assets you requested | Connection data (UI) | GDPR Art. 6(1)(b) — steps requested by you to use the information-society service; Art. 6(1)(f) — delivering a public site without accounts |
| Run a measurement you started, and cap abuse | Connection data (measurement), rate-limit key | GDPR Art. 6(1)(b) — performing the test you started; Art. 6(1)(f) — keeping a public speed test from becoming an unbounded firehose |
| Make the public pages discoverable | Search-property data | GDPR Art. 6(1)(f) — operating an indexable public tool |
| Answer a message you send | Correspondence | GDPR Art. 6(1)(b) and/or Art. 6(1)(f); Art. 6(1)(c) where the message is a legal demand we must meet |
Where Art. 6(1)(f) is used, the legitimate interests are: providing a free public tool, keeping the host available, and answering people who write to us. Those interests are balanced against your right to a private visit. Mbps and ms are not part of a stored profile.
The Service does not currently rely on consent (Art. 6(1)(a)) for cookies, marketing, or optional analytics, because those activities are not implemented. If that changes, this notice will change first.
6. Rate limits and hashed IP
A public speed test can be used as a bandwidth weapon. When the Worker is live, Cloudflare sees the connecting IP. The Worker hashes that address with HMAC-SHA256 and a secret before any storage. The daily count lives in Workers KV under the hash, never the raw IP. Burst limits use a Rate Limiting binding keyed the same way.
The raw IP is not written to KV, to committed artifacts, to analytics, or next to a Mbps/ms result. Fail-closed: if the daily-count store cannot be read or written, the Worker does not issue a test session.
8. Recipients
- Netlify — static hosting of the UI. See https://www.netlify.com/privacy/.
- Cloudflare — measurement Worker, when live. See https://www.cloudflare.com/privacypolicy/.
- Google LLC — Search Console for the speed subdomain (DNS TXT), and Google Search when it crawls public pages.
- Google LLC (Gmail) — if you write to alex.jungean@gmail.com.
- Competent authorities, if a legal obligation requires disclosure.
There is no advertising network, no customer-support SaaS, and no third-party script that receives test samples.
9. International transfers
The operator is established in Romania. Hosting, the measurement edge, Search Console, and email may involve processing in the United States or on other servers outside the European Economic Area.
Where a transfer is not covered by an adequacy decision of the European Commission, we rely on the transfer tools used by those providers — typically Standard Contractual Clauses — and on their published supplementary measures. You may ask for more detail at alex.jungean@gmail.com.
10. Retention
- On-page results: not stored on a server. They remain in this browser until you start again, leave the page, or close the tab.
- Hashed daily count: Workers KV with a short TTL (two UTC days) when the host is live.
- UI connection data: retained according to the host’s default edge/CDN logs. We do not export those logs into a private archive.
- Search-property data: retained in Search Console according to Google’s product retention.
- Correspondence: kept as long as needed to handle your request and any related legal obligation, then deleted unless a longer statutory period applies.
11. Your rights
If GDPR applies to you, you may request:
- access to personal data we hold about you;
- rectification of inaccurate data;
- erasure, where the legal conditions are met;
- restriction of processing;
- data portability, where processing is automated and based on contract or consent;
- objection to processing based on legitimate interests;
- a complaint to a supervisory authority.
Because results live only in your browser, we cannot access, correct, export, or delete a Mbps or ms figure you saw on the page. We cannot look up a raw IP in KV.
Write to alex.jungean@gmail.com. We answer within one month of receipt. That period may be extended by two further months for a complex or numerous request; if so, we will tell you why.
You also have the right to lodge a complaint with Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, 010336 București, România, anspdcp@dataprotection.ro, https://www.dataprotection.ro, or with the supervisory authority of your EU/EEA country of residence or work.
12. Children
The Service is not directed at children under 16. Romanian law sets 16 as the age for a child’s own consent to information-society services. We do not knowingly collect personal data from children. If you believe a child has sent us personal data by email, contact us and we will delete it unless we must keep it.
13. Security and claims
- HTTPS for the published UI;
- X-Content-Type-Options, X-Frame-Options DENY, and a restrictive Permissions-Policy;
- no third-party script that receives test samples;
- measurement endpoints that ignore caller-supplied origins;
- hashed IP for rate limits; fail closed if the daily store is unavailable.
These measures reduce accidental disclosure. They do not make the Service “secure” in every sense. Results are browser measurements to one Cloudflare edge, not a certified ISP lab result.
14. Changes
The current version of this notice is always this page. The effective date and version number appear at the top. We will change the date when the notice changes.
15. Contact
Privacy requests: alex.jungean@gmail.com
Related documents: Terms of Use, Cookie Policy, Legal Notice.
Politica de confidențialitate
Aceasta este o versiune rezumată în limba română, nu o traducere articol-cu-articol. Dacă textele diferă, varianta în limba engleză este textul operativ al Serviciului, cu excepția cazului în care legea română sau dreptul Uniunii Europene impune altfel.
Versiunea 0.9 · În vigoare din 19 septembrie 2026 · Internet Speed Test
1. Cine suntem
Operatorul este Jungean-Herman Marius-Alexandru (Alexandru Jungean), persoană fizică stabilită în România. Serviciu: Internet Speed Test, https://speed.alexjungean.com. Origin de măsurare: https://speed-measure.alexandrujungean.workers.dev. Contact: alex.jungean@gmail.com.
2. Ce face Serviciul
Interfața este un site static pe Netlify. Testul de debit nu rulează într-o Funcție Netlify. Start deschide o sesiune scurtă și măsoară descărcarea către un Worker Cloudflare la https://speed-measure.alexandrujungean.workers.dev. Payload-ul public de descărcare este 25 MiB, după un warmup de 3 MiB și o tură de 25 MiB fără scor. Încărcarea folosește POST-uri de 1 MiB (plafon 48 MiB sau 8 s) ca să rămână pe Workers Free. Mbps și latența HTTP se calculează în acest browser.
3. Categorii de date
Date de conexiune la UI (IP, URL, user-agent) create de Netlify. La un test live, Worker-ul vede IP-ul de conectare, îl hash-uiește cu HMAC-SHA256 și ține un contor zilnic în KV — niciodată IP-ul brut lângă un rezultat Mbps/ms. Rezultatele rămân în memoria paginii. Nu există conturi.
4. Temeiuri
Livrarea site-ului și rularea testului cerut de tine: Art. 6(1)(b) și/sau 6(1)(f) GDPR. Limitarea abuzului: Art. 6(1)(f). Corespondența: Art. 6(1)(b), 6(1)(f) sau 6(1)(c). Serviciul nu se bazează acum pe consimțământ pentru cookie-uri sau analitică.
5. Drepturi
Dacă ți se aplică GDPR, poți cere acces, rectificare, ștergere, restricționare, portabilitate, opoziție și o plângere la Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP). Scrie la alex.jungean@gmail.com. Răspundem în termen de o lună. Nu putem recupera un rezultat care a existat doar în browserul tău.