Minimal data footprint with inspectable boundaries
RealTest is built so you can evaluate and choose online tools without creating an account or uploading private files. This page explains what data is and is not touched across RealTest.org, the client-side file inspector, the submission queue, and our browser extension.
No user accounts, no third-party ad networks, no behavioral profiling, and no cross-site tracking cookies.
Files dropped into /benchmark are analyzed in local browser memory via Canvas and Web APIs—never uploaded.
/submit/ stores only your form fields and a daily salted SHA-256 rate-limit key; public receipts never echo raw submissions.
The browser extension matches URLs locally against a cached public index and never transmits your browsing history.
Data handling by module
| Module & route | Data processed or stored | What is never collected & retention |
|---|---|---|
| Website browsing (all pages & comparisons) | Standard HTTP requests are served via Cloudflare Pages/Workers for content delivery, TLS termination, and DDoS mitigation. Scroll positions are kept ephemerally in your browser tab’s sessionStorage and cleared when the tab closes. | No identity cookies, no third-party commercial analytics or ad retargeting scripts, and no personal search profiling. |
| Client-Side File Inspector (/benchmark) | Uses local HTML5 Canvas, DecompressionStream, and OpenXML parsers inside your browser memory to compute dimensions, alpha error (MAD/SAD), PSNR/SSIM, or text/table retention on files you drop onto the page. | Zero bytes of your dropped files are ever transmitted over the network to RealTest or any third party; memory is freed as soon as you refresh or leave the page. |
| Product submissions & corrections (/submit/ & /api/feedback) | When you submit the form, our Cloudflare Worker stores the submission type, tool domain, details, source links, client-generated receipt UUID, and timestamps in Cloudflare D1. For rate limiting (max 10 submissions/hour), we compute a one-way SHA-256 hash of the UTC date and connecting IP (client_key). | Raw IP addresses, browser fingerprints, and credentials are never stored in D1. Public receipt queries (GET /api/feedback?id=…) return only status, timestamps, and editorial notes—never your raw submission text. Local drafts stay on your device. |
| Browser Extension (RealTest Browser Companion) | Caches the public benchmark index (extension-index.json) in local chrome.storage.local, performs an unauthenticated read-only GET once every 24 hours from realtest.org, and matches the active tab hostname locally in memory to update the toolbar badge. | Never collects or transmits your browsing history, search queries, form inputs, or files uploaded to third-party tools, and injects zero DOM elements into third-party tool workspaces. |
Privacy safeguards in benchmark evidence
All RealTest benchmarks run in isolated guest or dedicated test environments using synthetic ground-truth fixtures and open test masters under pantry/masters/.
Before any artifact enters the public repository, automated gates and editorial checks verify that screenshots and native exports contain no personal data, test account credentials, private documents, or session tokens.
Privacy rights, data deletion & contact
If you inadvertently included personal or sensitive information in a /submit/ entry, send us the receipt UUID (or the approximate timestamp and domain) and we will permanently delete the record from our Cloudflare D1 queue.
- Privacy & data protection email: privacy@realtest.org
- General & editorial email: hello@realtest.org
- Online corrections & receipt channel: /submit/