Privacy Policy

Last Updated: October 30, 2026

1. Who We Are

VelocityVerify ("we", "our", "the site") operates an independent internet speed test and editorial platform at velocityverify.com. This Privacy Policy explains what data we collect when you use our services, why we collect it, how long we retain it, and how you can control or delete it.

2. Speed Test Data: What We Collect and Why

A speed test measures download and upload throughput, latency and jitter. Where available, the browser also displays latency under load. Cloudflare processes your network requests and IP address to deliver the test; the IP-information endpoint can return your IP address, approximate city/country and ISP name to your browser.

No database persistence is configured in the Cloudflare Pages production configuration checked on October 8, 2026. The results endpoint can accept download speed, upload speed, ping, jitter and ISP text, but does not persist a database record when the required database bindings are absent. It does not include an IP address in the optional results database record.

Your browser can save a small local test history. This is separate from server-side storage. See the Data Policy for local history, sharing and storage details. The application does not implement IP hashing or rotating IP-hash identifiers for results records.

We do not currently share aggregate data externally. This describes aggregate data shared by VelocityVerify; it does not exclude hosting-provider request processing, optional consented analytics, or result links you choose to share. Those activities are described in this policy and the Data Policy.

3. Advertising: Google AdSense and DoubleClick

VelocityVerify may use Google AdSense if advertising is approved and enabled. Google AdSense is a third-party advertising network operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

When AdSense is active on a page, Google and its advertising partners may use cookies, web beacons, and device fingerprinting to:

• Serve ads relevant to your interests based on your browsing history on this and other websites;
• Measure ad performance and prevent fraudulent clicks;
• Frequency-cap the number of times you see a given ad.

The primary cookie used is the DoubleClick (IDE) cookie set by doubleclick.net. Google's data processing for advertising is governed by the Google Privacy Policy and their advertising technology policies.

We implement Google Consent Mode v2. Optional analytics and advertising loaders are blocked by default until the required consent and configuration gates are satisfied. The current advertising flag remains inactive; non-consenting visitors do not trigger the Google Analytics or advertising loaders controlled by this site.

To opt out of personalised advertising from Google:

• Google Ads Settings : manage your ad personalisation preferences across all Google properties;
• aboutads.info : opt out from multiple advertising networks;
• NAI opt-out tool.

4. Analytics: Google Analytics

Google Analytics can be used to understand site usage only when the relevant destination is configured and analytics consent has been granted. The Google Analytics loader does not run before analytics consent. Google may then process information such as pages visited, referral source and device/browser details under its Privacy Policy.

You can reject optional analytics or change your choice using Cookie Preferences. You may also use the Google Analytics Opt-out Browser Add-on.

5. Infrastructure and Hosting

The website and test endpoints are hosted on Cloudflare Pages and Pages Functions. Cloudflare processes requests, IP addresses and related technical information to deliver and protect the service. Hosting-provider processing is separate from the application's results database. See the Cloudflare Privacy Policy.

The API supports optional Supabase database writes when the required server-side bindings are configured. No such database bindings were present in the production configuration checked on October 8, 2026. If persistence is enabled later, this policy must be reviewed for the actual processor, fields and retention controls before collection begins.

Cloudflare Web Analytics is a separate hosting-level service, not the Google Analytics loader. Where enabled by Pages configuration, its performance beacon is not controlled by this site's Google consent preference. It may request measurement resources before a cookie choice. See Cloudflare Web Analytics. This is distinct from essential request processing; rejecting Google analytics is not a claim that all hosting-level measurement is disabled.

6. Cookies

We use cookies and similar technologies. For a detailed breakdown of every cookie set on this site, see our Cookie Policy Cookie Preferences.

7. Email and Newsletter

Newsletter storage is unavailable while database bindings are absent: the subscription endpoint returns an unavailable response rather than confirming a saved subscription. If enabled later, the endpoint can store an email address, a generated subscription ID and creation time. Newsletter collection and retention terms must be reviewed before enabling that service.

If you choose to email us, your message is processed by the email services used to send and receive it. Please do not include unnecessary sensitive information.

Private human-support conversations

When you choose to open support, the support service establishes a private visitor session. Sending a message stores its subject, text, timestamps and conversation identifier in a separate Cloudflare Worker with SQLite Durable Object storage. Support does not start a speed test, read your results, or automatically attach diagnostic information. Include only what is needed; do not send passwords, payment details or sensitive network information. Text only; no attachments.

Session credentials and recovery keys are stored as hashes; message text is not end-to-end encrypted. The authorized site owner can read and reply to active conversations after Cloudflare Access sign-in. Cloudflare processes the requests and hosts the storage. Email support notifications are disabled, and replies require manual checking in Messages; no instant response is promised.

A Secure, HttpOnly, SameSite=Strict visitor-session cookie lasts up to 24 hours. Save your ticket and recovery key privately to regain access after the session ends. Clearing cookies does not delete the stored conversation. Successful recovery replaces the recovery key and revokes the previous visitor session's access to that thread. Never put a recovery key in a message.

Access expires 30 days after the last accepted visitor or owner message. Reads, recovery and rejected or duplicate sends do not extend this period. The application runs an hourly, bounded cleanup of expired records; expiry blocks access even before cleanup completes. This is an application-level schedule, not a guarantee about Cloudflare's infrastructure logs or backup retention.

For a support-data access or deletion request, use your existing private thread and identify the request. Do not send the recovery key to the owner. If you cannot access the thread, use Recover a thread first. Limits or outages may temporarily prevent new requests; preserve your unsent draft and retry later. A failed send is not a delivered request. The current inbox does not provide a self-service deletion button.

8. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Right of access : request a copy of the personal data we hold about you;
• Right to erasure : request deletion of personal data that can reasonably be linked to you. You can clear browser-local test history using the site controls or browser settings;
• Right to data portability : receive your data in a machine-readable format;
• Right to object : object to processing for direct marketing or analytics;
• CCPA opt-out : California residents may exercise the right to opt out of the sale or sharing of personal information. We do not sell personal data. Our current aggregate-data practice is described in Section 2. Hosting-provider processing, optional analytics and user-chosen result sharing are described separately in this policy.

To exercise any of these rights, contact us via the Contact page. We will respond within 30 days.

9. Data Retention

• Server-side results and subscriptions: no database persistence is configured in the production settings verified above. We do not claim a database retention period or automated deletion schedule that is not implemented.
• Browser-local history: the interface retains up to ten recent records in localStorage; you can clear them using Clear History or browser site-data settings. There is no fixed time-based expiry in this history implementation.
• Shared result URLs: result values are encoded in the link rather than stored as expiring result tokens. A shared URL can remain available wherever it is copied or retained.
• Hosting-provider logs: Cloudflare may process request information under its policies and service settings. We do not represent this as application-level zero logging or promise a specific provider-log deletion period.

10. Children's Privacy

VelocityVerify is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, contact us immediately.

11. Changes to This Policy

We update this policy when we add new features, third-party integrations, or when regulations change. The "Last Updated" date at the top reflects the most recent revision. Material changes will be communicated via the site's consent banner.

12. Contact

For privacy questions, data deletion requests, or complaints, contact us via the Contact page. If you are an EEA resident and believe we have not addressed your concern adequately, you have the right to lodge a complaint with your national data protection authority.