Privacy Policy
Effective / Last Updated: July 15, 2026
This Privacy Policy explains what information wetestit.live ("the Site", "we", "us", "our") collects when you use our free browser-based device testing tools, how that information is used, and the choices you have. It is written to reflect exactly what the Site's code does today.
- Who We Are
- Information We Collect
- Cookies We Use
- How We Use Information
- Legal Basis for Processing (GDPR)
- Who We Share Information With
- Data Retention
- Data Security
- Camera, Microphone & Other Device Permissions
- Children's Privacy
- Your Privacy Rights (GDPR / CCPA / CPRA)
- Advertising Choices & Opt-Out (see Google Ads Settings to actually manage ad personalization)
- International Data Transfers
- Changes to This Policy
- Contact Us
1. Who We Are
wetestit.live is a free set of browser-based hardware/peripheral testing tools. This policy
covers the website at wetestit.live and its subdomains.
2. Information We Collect
2.1 Information You Provide Directly
None. The Site has no forms, fields, or prompts that ask you to type in personal information (no name, phone number, or payment details anywhere on the Site).
2.2 Information Processed Automatically (Not Stored)
Like virtually all websites, our server and the reverse proxy in front of it necessarily process certain technical information for every request in order to route, operate, and secure the Site, including:
- Your IP address (received via standard proxy headers)
- Browser user-agent string
- The page/resource requested and the time of the request
- Referring page, where sent by your browser
This happens only in the moment, to route the request, keep the Site available, and detect abuse (e.g. origin/CSRF violations). We do not write this information to a persistent, searchable log, database, or file that we can look up later for a specific visitor, and it is not used to build advertising profiles by us directly.
2.3 Cookies We Set Ourselves
We set one cookie of our own, described in the cookie table below: a CSRF ("Cross-Site Request Forgery") protection token. It is a random value that is not linked to your identity, is not used for tracking or advertising, and exists purely to confirm that requests to change data actually originate from our own pages.
2.4 Real-Time, In-Browser Test Data
Some tools open a temporary WebSocket connection to our server for real-time interaction (for example, measuring network latency). Your browser sends a timestamp, the server immediately echoes it back, and your browser calculates the result locally to draw a chart. This data is not written to a database, not logged, and not associated with your IP address or any identifier beyond the life of that single connection.
2.5 On-Device Data That Never Leaves Your Browser
Several tools request access to device APIs purely to display results back to you, in your own browser. None of the following is ever transmitted to, or stored on, our servers:
- Camera or microphone access: where a tool requests it (with your browser's permission prompt), it shows a live local preview/waveform only. Nothing is recorded, uploaded, streamed, or stored anywhere.
- Network/IP diagnostics: some tools use your browser's WebRTC APIs to detect IP addresses your network adapters expose to browser-based tools, purely as a diagnostic display. This happens entirely client-side.
- Device/browser information: some tools read publicly available browser/JavaScript properties (e.g. screen resolution, pixel ratio, estimated CPU/RAM, platform string, and WebGL-reported GPU info) and display them to you. This information is not sent to our servers.
- Battery status: where your browser supports the Battery Status API, a tool may read your device's reported battery level/charging state and chart it locally.
- Content you build or save locally: anything you create with an editor-style tool (e.g. a custom layout or configuration) is held in your browser and only leaves your device if you explicitly click "Download"/"Copy," or choose to upload a file you saved earlier.
2.6 Advertising Cookies & Data (Google AdSense)
We show ads through Google AdSense to help cover hosting costs. Google, as a third-party vendor, and its advertising partners may use cookies (including cookies such as the DoubleClick/Google Ads cookie) and similar technologies to serve ads based on your prior visits to this and other websites, and to measure ad performance. This can involve Google receiving your IP address, browser/device information, and interactions with ads. This processing is carried out by Google under its own privacy policy. We do not control ad personalization ourselves; to actually manage or opt out of it, visit Google Ads Settings directly (see also Section 12).
2.7 Other Third-Party Content (CDNs)
A few pages load supporting libraries directly from third-party content delivery networks rather than from our own server:
- Chart.js: served from jsDelivr (used to render charts for some tools)
- Tailwind CSS: served from the Tailwind CDN (used for some layout styling)
- Font Awesome: served from cdnjs/Cloudflare (used for icons)
Loading any resource from a third-party server inherently exposes your IP address and browser user-agent to that provider, in the same way it would for any website that links to an external file. We do not control, and are not responsible for, those providers' own data practices, but none of these specific libraries are used by us to track you across sites.
3. Cookies We Use
| Cookie | Set By | Purpose | Type | Duration |
|---|---|---|---|---|
csrf_token |
wetestit.live (us) | Prevents cross-site request forgery on state-changing requests. Not linked to your identity. | Strictly necessary | 30 days |
| Google/DoubleClick advertising cookies | Google AdSense (third party) | Ad delivery, frequency capping, and (where applicable) ad personalization. | Advertising | Set by Google; see Google's policies |
We do not use any analytics cookies (e.g. Google Analytics) and we do not run any tracking pixels of our own.
4. How We Use Information
- To operate, maintain, and secure the Site (e.g., detecting abusive traffic and enforcing CSRF/origin checks).
- To display advertising through Google AdSense, which helps fund free access to the testing tools.
- To diagnose bugs and performance issues in real time; we do not maintain persistent server logs to review later.
We do not use any information collected to build advertising profiles ourselves, and we do not sell personal information.
5. Legal Basis for Processing (GDPR)
Where the GDPR/UK GDPR applies, we rely on the following legal bases:
- Legitimate interests: for the momentary processing of technical request data and CSRF protection, necessary to keep the Site functional and secure.
- Consent: for non-essential advertising cookies, where required by your location. EU/UK visitors are shown a consent banner before any personalized advertising cookies are set, and can grant, decline, or withdraw consent there at any time; see Section 12 for further controls.
- Explicit device permission: for camera, microphone, and battery status access, which your browser will only grant after you actively approve a permission prompt.
6. Who We Share Information With
We do not sell, rent, or trade personal information. Limited data is collected by:
- Google (AdSense): to serve advertising, as described above.
- Content delivery networks (jsDelivr, Tailwind CDN, cdnjs/Cloudflare): only in the sense that your browser fetches library files directly from them.
- Our hosting/reverse-proxy infrastructure: processes connections purely to deliver the Site to you and to protect it from abuse.
7. Data Retention
We do not maintain persistent server or security logs beyond the momentary processing needed to handle and secure each request (see Section 2.2). We also do not maintain a user database, so there is no account or profile data to retain. Cookies persist on your device for the durations listed in the cookie table unless you clear them sooner.
8. Data Security
- All traffic is served over HTTPS.
- State-changing requests are protected against CSRF using a double-submit cookie/header check, and against cross-origin abuse using origin/referer verification.
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Camera, Microphone & Other Device Permissions
Any tool that uses your camera or microphone only activates them after your browser asks
for, and you grant, permission. Video and audio are rendered locally in your browser (for
example, in an on-screen <video> element or an audio waveform/spectrogram)
so you can verify your hardware works. We do not record, upload, transmit, or retain this
media on any server. You can revoke camera/microphone permission at any time through your
browser's site settings, which will immediately stop the relevant tool from functioning.
10. Children's Privacy
Our Site and testing tools are not directed at children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can address it.
11. Your Privacy Rights (GDPR / CCPA / CPRA)
Depending on where you live, you may have the right to:
- Know what personal information (if any) we hold about you;
- Request access to, correction of, or deletion of that information;
- Object to or restrict certain processing, including opting out of personalized advertising;
- Not be discriminated against for exercising these rights.
We do not maintain user accounts or profiles, and we do not keep a persistent, per-visitor log of the technical request data described in Section 2.2, so we typically have nothing on file to access, correct, or delete. If you have a privacy question or request (including about advertising cookies), contact us using the details in Section 15. We do not sell personal information for money. We do use third-party advertising (Google AdSense), which may be considered "sharing" of personal information for cross-context behavioral advertising under the CPRA; see Section 12 to opt out of personalized advertising at any time.
12. Advertising Choices & Opt-Out
If you're visiting from the EU/UK, a consent banner is shown before any non-essential advertising cookies are set, letting you grant, decline, or withdraw consent for ad personalization at any time. Wherever you're located, you also have several ways to control ad personalization directly with Google:
- Google's own controls: Google Ads Settings
- Industry opt-out tools: aboutads.info (US) and Your Online Choices (EU)
- Learn how Google uses data from sites that use its services: How Google Uses Data
- Your browser's own cookie and site-permission settings, which let you block or delete cookies at any time.
13. International Data Transfers
Our hosting/reverse-proxy infrastructure and the third-party CDNs and advertising providers described above may process data on servers located outside of your own country, including in the United States. Where required, such transfers rely on the safeguards those providers make available (for example, Google's standard contractual clauses for AdSense).
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to the Site or legal requirements. The "Effective / Last Updated" date at the top of this page will always reflect the latest revision.
15. Contact Us
If you have questions about this Privacy Policy or wish to make a privacy-related request, contact us at admin@wetestit.live.