Privacy

Who is responsible

RunTheTests is operated by Brightscale Labs Limited, a company registered in England and Wales under company number 16990009. Registered office: 8 Flay Field, Tithebarn, Exeter, Devon, EX1 3YA, England. For anything on this page, that company is the data controller, and you can reach it at contact@brightscalelabs.com.

In practice there is very little for a controller to control, which is the point of the rest of this page. If you are unhappy with how your data has been handled, you can complain to the UK Information Commissioner's Office at ico.org.uk.

There are no accounts

You cannot sign up, and there is nothing to sign into. We do not ask for your name or email to use any tool.

Most tools never send anything

Calculators, converters, password tools, image tools and the interpreters that read pasted diagnostic output all run entirely in your browser. Your files, passwords and pasted text are processed locally and are never transmitted. You can confirm this yourself: open your browser's network panel and use the tool — there is no request carrying your data, because there is no endpoint to receive it.

The tools that do make a request

A small number need the network to work at all:

• DNS lookups send the domain you typed directly from your browser to public resolvers run by Cloudflare and Google. Those queries do not pass through our servers, so we never see which domains you look up.
• Connection details (IP address, approximate location, network operator) are read at Cloudflare's edge from the connection you already made by loading the page. They are returned to you and markedno-store, so they cannot be cached and served to anyone else. They are not written to a database — there is no database.
• Site checkers request the URL you supply from our infrastructure, because a browser cannot read another site's response. The URL is used for that request and is not logged.

Pages that handle secrets

Password, passphrase, encryption, hashing and checksum pages carry no advertising and no third-party scripts, and ship a Content-Security-Policy that blocks outbound connections entirely. This is a security requirement, not a courtesy: any script on the page can read what you type into it, so an ad-supported password tool is a real vulnerability.

Even so, the safest habit is not to type a genuine password into any website, this one included. Test with something of the same shape instead.

Diagnostic output and metadata

Pasted diagnostic output often contains serial numbers, hostnames and sometimes usernames. It is parsed in your browser, and identifiers are stripped from anything a tool offers you to download or share.

Image tools re-encode your file locally, which removes all EXIF metadata including GPS coordinates. That is usually a benefit worth knowing about — but it also means capture dates and camera settings are lost.

Analytics and session replay

Two tools, gated differently, and the difference is the part worth reading.

Google Analytics counts page views and where visitors arrived from. It loads on every page, but under Google’s consent mode: until you agree it stores nothing on your device and cannot connect this visit to your last one. The honest consequence is that Google is told a page was opened even if you go on to decline — what it does not get is anything that follows you between visits.

Microsoft Clarity records how a page was used — where people scroll, what they click, which step of a tool loses them — and replays it as a reconstruction of the markup, not a recording of your screen. Because it reconstructs the page, it is not loaded at all until you consent: decline, or never answer, and no request is made to it. Microsoft processes this on our behalf under its own retention terms.

Clarity runs on its default masking, which obscures text typed into form fields rather than recording it, and none of that text reaches us either way. Neither tool runs on the secret-handling pages described above, under any answer you give.

Your answer is recorded by our consent manager, InMobi Choice, and kept in your browser. “Cookie preferences” at the foot of any page reopens it, and withdrawing consent is one click, the same as giving it. The Cookie Policy lists what is stored.

Advertising

Some pages carry advertising and affiliate links, disclosed where they appear, and we may earn a commission from them. Ad networks set their own cookies and follow their own policies, which we do not control. No advertising runs on the secret-handling pages described above.

Questions

contact@brightscalelabs.com. If you find a claim on this page that the site's behaviour does not match, that is a bug and we want to hear about it.