Speedlyst measurement service, Privacy Policy
1. Controller
PPC ONE s.r.o., company ID (IČO) 05931631, registered office Korunní 2569/108, Vinohrady, 101 00 Prague 10, Czech Republic. Contact: [email protected].
2. When anything is sent
Nothing is sent unless you click the measurement button in the plugin. The plugin does not measure automatically, not even after installation.
3. What the service receives
- The public URL of the home page of the site being measured
- A one-time random verification code, valid for five minutes
- The version of the plugin making the request
The service reads the one-time code from a public route on the measured site to confirm that the request belongs to that site. The plugin version tells the service which request format to expect, so that older installations keep working when the format changes.
4. What the service stores, and for how long
- The domain of the measured site and the time of the request. Records older than 2 days are deleted automatically, during the next incoming request. This record is what enforces the limit described in the terms, which is also why it is written before the measurement runs: an unverifiable request has to consume its own allowance.
- Verification codes, usable for 5 minutes, removed by automatic cleanup once they expire.
5. What the service does not store
The service does not store measurement results or scores, page content, posts, WordPress user data, or visitor data. It does not read or record the IP address of the request on this route, keeps no access log for it, sets no cookies, runs no analytics, and uses no tracking identifier.
6. Is this personal data?
A domain name and a timestamp usually do not identify any individual. In some cases a domain can still be linked to a natural person, for example the site of a sole trader or a personal website. We therefore treat these records under the GDPR wherever that link is possible, and we keep them minimal and short-lived.
7. Purposes and legal bases
- Carrying out the measurement you requested, including verifying that the request belongs to your site: performing the service at your request (Article 6(1)(b) GDPR, or your consent expressed by clicking the button, depending on your relationship with us).
- Enforcing the limit and protecting the service from abuse: our legitimate interest in keeping a free service available and not letting it be used as free bandwidth (Article 6(1)(f) GDPR).
8. Sharing with Google
To produce a measurement, the service sends the public URL of the measured home page to the Google PageSpeed Insights API. Google loads that public page and returns the analysis. Google determines its own handling of that request under its own terms, and the processing may take place outside the European Economic Area.
Google Terms of Service: https://policies.google.com/terms Google Privacy Policy: https://policies.google.com/privacy
9. Your rights
If the stored records relate to you as an identified or identifiable natural person, you have the right to access them, to have them corrected or erased, to have their processing restricted, and to object to processing based on our legitimate interest. Because the records are deleted after two days, most of them are gone before a request can be handled, and we may need you to demonstrate that you administer the site in question before we act. You may also lodge a complaint with the Czech Data Protection Authority, Úřad pro ochranu osobních údajů (uoou.gov.cz).
10. Data kept inside your WordPress
Measurement history, local diagnostics, and settings stay in your own WordPress database. We have no access to them, and removing the plugin removes them.
11. Contact
---