Privacy Policy

Last Updated: October 8, 2026

1. Who We Are

VelocityVerify ("we", "our", "the site") operates an independent internet speed test and editorial platform at velocityverify.com. This Privacy Policy explains what data we collect when you use our services, why we collect it, how long we retain it, and how you can control or delete it.

2. Speed Test Data: What We Collect and Why

A speed test measures download and upload throughput, latency and jitter. Where available, the browser also displays latency under load. Cloudflare processes your network requests and IP address to deliver the test; the IP-information endpoint can return your IP address, approximate city/country and ISP name to your browser.

No database persistence is configured in the Cloudflare Pages production configuration checked on October 8, 2026. The results endpoint can accept download speed, upload speed, ping, jitter and ISP text, but does not persist a database record when the required database bindings are absent. It does not include an IP address in the optional results database record.

Your browser can save a small local test history. This is separate from server-side storage. See the Data Policy for local history, sharing and storage details. The application does not implement IP hashing or rotating IP-hash identifiers for results records.

3. Advertising: Google AdSense and DoubleClick

VelocityVerify may use Google AdSense if advertising is approved and enabled. Google AdSense is a third-party advertising network operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

When AdSense is active on a page, Google and its advertising partners may use cookies, web beacons, and device fingerprinting to:

• Serve ads relevant to your interests based on your browsing history on this and other websites;
• Measure ad performance and prevent fraudulent clicks;
• Frequency-cap the number of times you see a given ad.

The primary cookie used is the DoubleClick (IDE) cookie set by doubleclick.net. Google's data processing for advertising is governed by the Google Privacy Policy and their advertising technology policies.

We implement Google Consent Mode v2. Optional analytics and advertising loaders are blocked by default until the required consent and configuration gates are satisfied. The current advertising flag remains inactive; non-consenting visitors do not trigger analytics or advertising loaders.

To opt out of personalised advertising from Google:

• Google Ads Settings — manage your ad personalisation preferences across all Google properties;
• aboutads.info — opt out from multiple advertising networks;
• NAI opt-out tool.

4. Analytics: Google Analytics

Google Analytics can be used to understand site usage only when the relevant destination is configured and analytics consent has been granted. Optional analytics do not load before consent. Google may then process information such as pages visited, referral source and device/browser details under its Privacy Policy.

You can reject optional analytics or change your choice using Cookie Preferences. You may also use the Google Analytics Opt-out Browser Add-on.

5. Infrastructure and Hosting

The website and test endpoints are hosted on Cloudflare Pages and Pages Functions. Cloudflare processes requests, IP addresses and related technical information to deliver and protect the service. Hosting-provider processing is separate from the application's results database. See the Cloudflare Privacy Policy.

The API supports optional Supabase database writes when the required server-side bindings are configured. No such database bindings were present in the production configuration checked on October 8, 2026. If persistence is enabled later, this policy must be reviewed for the actual processor, fields and retention controls before collection begins.

6. Cookies

We use cookies and similar technologies. For a detailed breakdown of every cookie set on this site, see our Cookie Policy Cookie Preferences.

7. Email and Newsletter

Newsletter storage is unavailable while database bindings are absent: the subscription endpoint returns an unavailable response rather than confirming a saved subscription. If enabled later, the endpoint can store an email address, a generated subscription ID and creation time. Newsletter collection and retention terms must be reviewed before enabling that service.

If you choose to email us, your message is processed by the email services used to send and receive it. Please do not include unnecessary sensitive information.

8. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you;
• Right to erasure — request deletion of personal data that can reasonably be linked to you. You can clear browser-local test history using the site controls or browser settings;
• Right to data portability — receive your data in a machine-readable format;
• Right to object — object to processing for direct marketing or analytics;
• CCPA opt-out — California residents may exercise the right to opt out of the sale or sharing of personal information. We do not sell personal data. We do share anonymised aggregate data for editorial purposes, which does not constitute a "sale" under CCPA.

To exercise any of these rights, contact us via the Contact page. We will respond within 30 days.

9. Data Retention

• Server-side results and subscriptions: no database persistence is configured in the production settings verified above. We do not claim a database retention period or automated deletion schedule that is not implemented.
• Browser-local history: the interface retains up to ten recent records in localStorage; you can clear them using Clear History or browser site-data settings. There is no fixed time-based expiry in this history implementation.
• Shared result URLs: result values are encoded in the link rather than stored as expiring result tokens. A shared URL can remain available wherever it is copied or retained.
• Hosting-provider logs: Cloudflare may process request information under its policies and service settings. We do not represent this as application-level zero logging or promise a specific provider-log deletion period.

10. Children's Privacy

VelocityVerify is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, contact us immediately.

11. Changes to This Policy

We update this policy when we add new features, third-party integrations, or when regulations change. The "Last Updated" date at the top reflects the most recent revision. Material changes will be communicated via the site's consent banner.

12. Contact

For privacy questions, data deletion requests, or complaints, contact us via the Contact page. If you are an EEA resident and believe we have not addressed your concern adequately, you have the right to lodge a complaint with your national data protection authority.