Privacy

Privacy Policy

Core VMAXCHECK features do not require an account. This policy explains what data is processed when you use the speed test, the network tools and this website, and which rights you have under the General Data Protection Regulation (GDPR).

Controller

Anna Sosnowski, c/o IP-Management #17839, Ludwig-Erhard-Str. 18, 20459 Hamburg. Contact: contact at vmaxcheck dot com. See the imprint for full details.

Speed tests and Measurement Lab

When you click CHECK SPEED, your browser connects directly to Measurement Lab (M-Lab) infrastructure. Test traffic flows between your device and M-Lab servers, not through VMAXCHECK hosting. M-Lab processes technical measurement data, including the public IP address used for the test, and publishes measurement data according to the M-Lab privacy policy and data policy. Starting the test is your consent to this processing. Legal basis: Art. 6(1)(a) GDPR.

Google Analytics

With your consent, this website uses Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A consent banner asks before anything loads: without your Accept, no Google script or request happens. You can reopen the choice anytime via Cookie settings in the footer.

When active, Google processes usage events such as test starts and completions, tool usage and theme changes. Speed values are sent only as coarse buckets, never as exact measurements, and lookup inputs are never transmitted. Data may be transferred to the United States under the EU-US Data Privacy Framework and Google's contractual safeguards. Legal basis: Art. 6(1)(a) GDPR. You can withdraw consent anytime through Cookie settings, which stops future collection.

Advertising

Advertising is currently disabled: no ad scripts load and no advertising cookies are set. If advertising is activated later, it will use Google AdSense, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and only with your prior consent through the cookie banner.

With consent, Google may process cookie identifiers and usage data to show personalized ads, including transfers to the United States under the EU-US Data Privacy Framework and Google's contractual safeguards. Personalized advertising in the EEA additionally requires a certified consent management platform, which will be named here before any personalized ads go live. Legal basis: Art. 6(1)(a) GDPR. You can withdraw consent anytime through Cookie settings.

Network tools

IP, ASN and domain tools query public registration (RDAP) and DNS data from authoritative services. Your lookup input is sent to those services to answer the query. Abuse protection applies rate limits. Legal basis: Art. 6(1)(b) GDPR for providing the requested tool, and Art. 6(1)(f) GDPR for security.

Data stored in your browser

Theme choice, cookie consent choice, test history (latest 20 results) and plan comparison entries stay in your own browser storage. Nothing from there is sent to us except the analytics events described above, and only with consent.

Server-side operational data

For reliability and abuse prevention, the server keeps privacy-minimized counters and security events such as rate-limit bans and failed admin logins. Client addresses are stored only as hashes, never as plaintext, except failed admin login attempts, which keep the address for attack analysis. This data is not used for tracking and is not combined into user profiles. Legal basis: Art. 6(1)(f) GDPR. The hosting environment may additionally keep technical server logs outside our application.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection under Art. 15-21 GDPR, as well as the right to withdraw consent at any time. Contact details are above. You also have the right to lodge a complaint with a supervisory authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information.