This Privacy Policy explains how the Nerp Speed mobile application (the “app”) and the website nerpspeed.com (the “website”) handle information: what is involved, who receives it and what rights you have.
The app and the website are provided by LEIKUR, UAB, Gedimino pr. 20, LT-01103 Vilnius, Lithuania (“we”, “us”). For any privacy question, write to contact@leikuruab.com.
1. Privacy Policy overview
This policy covers:
- the Nerp Speed app: the speed test, connection details, the host check, the Services tab, the DNS settings and DNS check, and the measurement history;
- the website nerpspeed.com, including the speed test page and the Privacy Policy, Terms of Use and Support pages that the app opens.
The rules for using the app and the website are set out separately in our Terms of Use.
Key points
- There is no account, no advertising, and no analytics or tracking tools in the app. We do not sell data and do not build profiles.
- To perform the measurements you start, the app connects to the services listed in this policy.
- The speed test runs on M-Lab, an open internet measurement platform. M-Lab receives your IP address and the measurement and publishes test data, including IP addresses, as open data for research.
- Your measurement history and settings are stored only on your device. Deleting the history or the app removes them.
2. Information collected, received and created
Nerp Speed is designed so that we receive as little as possible. Most of the information described below is either created and kept on your device or sent by your device directly to the services that carry out the function you started. The app does not send us your measurements, your history or your settings. We ourselves receive only standard website server logs and the messages you write to us.
Registration
There is nothing to sign up for. The app has no registration, account or password and no sign-in through Apple, Google or other services.
Profiles and public content
The app has no profiles, comments, forums or other public areas, so we do not publish anything you do in the app.
Inferences
We do not draw conclusions about your interests, demographic characteristics or behaviour and do not build profiles. The provider and approximate location shown in the app come from ipwho.is (see below) and are used only to show them to you and to save them in your history on the device.
Speed test
When you open the speed test screen and before each test, the app asks the M-Lab Locate API (locate.measurementlab.net) for test servers near you; to find them, M-Lab uses your IP address. If you pick a server yourself, the app asks the same API for the servers of that M-Lab site. The test itself runs on an M-Lab server (measurement-lab.org) using the open ndt7 protocol.
M-Lab (Measurement Lab) is an open internet measurement platform, and the Nerp Speed speed test runs on it. During a test M-Lab receives your IP address, the measurement data (download and upload throughput, latency and related network statistics), the time of the test and the app identifier “NERP SPEED/1.0”. According to M-Lab's own policy, it keeps the data it collects indefinitely and publishes it, including IP addresses, as open data for internet research. Details: M-Lab privacy policy.
Connection details
After a test the app shows details about your connection. To do so it:
- asks ipwho.is about your public IP address to get the provider name, ASN, approximate location (country, region, city, postal code) and time zone;
- asks rdap.org, which forwards the request to the regional internet registry responsible for the address (ARIN, RIPE NCC, APNIC, LACNIC or AFRINIC), for the IP range your address belongs to;
- performs a reverse DNS lookup of your IP address through your device's DNS resolver.
Host check
When you check a host, the host name you entered is resolved through DNS — by your device's resolver or by the resolver you selected in Settings (Google Public DNS, Cloudflare, Quad9, AdGuard DNS or an address you entered). If the device resolver is used, the app also asks Cloudflare (1.1.1.1) or Google (8.8.8.8) for the record's TTL, which means the host name is sent to them as well.
The app then connects to the host from your device (a series of TCP connections to port 443 and one HTTPS request). Like any website visit, the host receives your IP address and standard request data. The host's IP address is looked up with ipwho.is and rdap.org to show its location, provider and IP range.
Service availability
Only when you tap Check on the Services tab, the app resolves the names of the listed services (Google, YouTube, Instagram, WhatsApp, Telegram, Facebook, X, TikTok, Discord, ChatGPT, Netflix and Spotify) through your device's resolver, opens a connection to each and sends one HTTPS request — similar to opening their web pages. These services receive your IP address and standard request data and handle them under their own policies.
DNS check
The “Check whether it works” button in the DNS settings sends a test query for whoami.akamai.net to the resolver you selected and to a public reference resolver. Akamai's DNS servers answer with the address of the resolver that contacted them, which shows whether your requests really reach the chosen resolver.
Data created and stored on your device
The app stores on your device:
- history — up to 100 recent speed tests and host checks, including the test server location and connection details such as your public IP address, provider, approximate location and IP range;
- settings — the selected DNS resolver, language and theme.
This data never leaves the device through the app unless you share a result yourself (see below). You can clear the history in Settings → Interface; deleting the app removes all of it.
Sharing a result
If you tap Share, the result is passed as text to the app you choose in the iOS share sheet. Nothing is shared automatically.
When you contact us
If you write to us, we receive your email address, your message and whatever you include in it — for example, the app version, device model or screenshot that the Support page suggests adding. We use this only to answer you and help with your request.
The website
When you open the website — including when the app opens the Privacy Policy, Terms of Use or Support page in a Safari window — the server that hosts it receives standard technical data: IP address, time of the request, the page requested and the browser's user agent. It may keep this data in server logs for security and troubleshooting for no longer than 30 days. Cookies and local storage are covered in section 7.
Speed test on the website
The speed test at nerpspeed.com/test works like the one in the app: when you press Start, your browser asks the M-Lab Locate API for a nearby server and runs the open ndt7 test against it. M-Lab receives your IP address, the measurement and your browser's user agent and handles them under its own privacy policy. By pressing Start you also agree to the M-Lab privacy policy. Nothing is sent to M-Lab before you press Start. The result is shown only in your browser — the website does not send it to us or store it.
Information from third parties
The answers from the services described above — such as your provider's name or IP range — go to your device, not to us. We do not obtain information about you from data brokers, social networks or advertising partners.
3. Data processing and retention
We process very little personal data ourselves. The table lists each purpose, the data involved and where it goes, the legal basis where the EU General Data Protection Regulation (GDPR) applies, and how long the data is kept.
| Purpose | Data and where it goes | Legal basis (GDPR) | How long |
|---|---|---|---|
| Speed test | IP address, measurement data, test time, app identifier → M-Lab | Art. 6(1)(b): a function you request | on your device — until you clear the history; at M-Lab — see section 11 |
| Connection details | your IP address → ipwho.is, rdap.org and a regional registry; reverse DNS lookup → your device's resolver | Art. 6(1)(b) | on your device — until you clear the history; at the services — under their policies |
| Host check | host name → DNS resolver (and 1.1.1.1 or 8.8.8.8 for the TTL); IP address and request data → the host; the host's IP address → ipwho.is and rdap.org | Art. 6(1)(b) | as above |
| Services check | IP address and standard request data → the 12 services checked | Art. 6(1)(b) | under the services' policies |
| DNS check | test query for whoami.akamai.net → the selected and a reference resolver, and through them Akamai | Art. 6(1)(b) | under the resolvers' policies |
| History and settings | results and settings from section 2 → stay on your device | Art. 6(1)(b) | until you clear the history or delete the app |
| Website operation and security | server logs: IP address, request time, page, user agent | Art. 6(1)(f): our legitimate interest in a secure website | up to 30 days |
| Answering your messages | email address, message, attachments | Art. 6(1)(f): our legitimate interest in providing support | as long as needed to answer, then up to 24 months |
The connections described above are made to perform the functions you request in the app (Article 6(1)(b) GDPR). Website server logs and answering your messages to us are based on our legitimate interest in running a secure website and providing support (Article 6(1)(f) GDPR). We do not process personal data for marketing, advertising, analytics or profiling.
4. Sensitive personal information
The app does not ask for access to your location, contacts, photos, camera or microphone, and it never uses GPS or any other way of determining your precise location. The location shown in the app is approximate: ipwho.is derives it from the IP address.
We do not seek or process special categories of personal data, such as data about health, ethnic origin, political opinions, religious beliefs or sexual orientation. If you mention such information in a message to us, we use it only to answer that message.
5. Direct marketing
Nerp Speed does not send marketing messages: there are no newsletters, promotional emails or SMS, and the app sends no push notifications. We use your email address only to reply to the message you sent us.
6. Behavioural advertising
There is no advertising in the app or on the website, and we take no part in behavioural or interest-based advertising. The app does not track you across other companies' apps and websites and does not read your device's advertising identifier, so it never asks for permission to track. We do not sell personal data or share it for targeted advertising.
7. Cookies and local storage
The website does not use cookies, analytics or advertising. Your theme choice (light, dark or system) is saved only in your browser's local storage; it is not sent to the server, and you can remove it by clearing the site data in your browser. If an address has no language in it, the website chooses English or Russian from your browser's language settings — also without cookies.
The app does not use cookies or similar technologies to track you. It keeps its history and settings in its own storage on your device (section 2).
8. Information shared with third parties
We do not sell, rent or trade personal data, and we do not pass it to advertisers, data brokers or analytics providers. When you use a function of the app, your device sends the data that function needs directly to the services below. They act as independent controllers under their own policies.
| Service | What it receives | Why | Policy |
|---|---|---|---|
| M-Lab | IP address, measurement data | speed test; publishes test data as open data | measurementlab.net/privacy |
| ipwho.is | your IP address, IP addresses of hosts you check | provider and location details | ipwho.is |
| rdap.org and regional internet registries | IP addresses looked up | IP range | rdap.org |
| Google Public DNS | host names you check (when selected, or for TTL) | DNS resolution | Google Public DNS privacy |
| Cloudflare 1.1.1.1 | host names you check (when selected, or for TTL) | DNS resolution | Cloudflare resolver privacy |
| Quad9 | host names you check (when selected) | DNS resolution | Quad9 privacy |
| AdGuard DNS | host names you check (when selected) | DNS resolution | AdGuard DNS privacy |
| Akamai | a test DNS query (from the resolver, not from you) | DNS check | Akamai privacy |
| Hosts and services you check | IP address, standard request data | reachability checks | their own policies |
Partnerships and SDKs
Nerp Speed has no data partnerships. The app contains no third-party code for advertising, analytics, location or crash reporting, and nothing collects data through it in the background.
Open data published by M-Lab
We do not sell or license measurement results to anyone. M-Lab, the measurement platform the speed test runs on, publishes the test data it collects — including IP addresses — as open data for internet research. According to M-Lab, anyone may use this data for any purpose. That data is governed by M-Lab's own policy: measurementlab.net/privacy.
Public authorities
We disclose the little data we hold — website logs and our correspondence with you — to public authorities only where the law obliges us to (Article 6(1)(c) GDPR). Your measurement history stays on your device, so we have nothing to disclose about it.
Change of ownership
If the app or the website is ever transferred to another company, the data we hold (website logs and correspondence) may pass to that company together with them.
9. International transfers of information
Some of these services, for example M-Lab, Google and Cloudflare, process data outside the European Economic Area, including in the United States. Your device connects to them directly when you use the corresponding function; their handling of the data is governed by their own policies and safeguards, including the transfer mechanisms they rely on. We do not pass this data on from the app ourselves: the connection is made by your device at your request.
If you have a question or a complaint about how your data is transferred, write to us; you can also contact the supervisory authority (section 12).
10. Data security and breach handling
All connections the app makes to web services use HTTPS or secure WebSockets; the app connects to measurement servers only over encrypted WebSockets (wss). Plain DNS queries are sent the usual way, as by any other app on your device.
Your history is kept in the app's own storage on your device, so its protection also depends on the device: use a passcode and keep iOS up to date.
We protect the data we hold (website logs and correspondence) with appropriate technical and organisational measures and limit access to it. If a personal data breach affects that data, we will notify the State Data Protection Inspectorate and, where required, the people affected, as the GDPR requires. If you believe that data related to your use of Nerp Speed has been compromised, write to contact@leikuruab.com.
11. Data retention
We keep data only as long as needed for the purposes in section 3:
- On your device: until you clear the history or delete the app.
- Our email: messages you send us are kept as long as needed to answer them and for up to 24 months afterwards.
- Website logs: up to 30 days.
- M-Lab: according to M-Lab's policy, test data is kept indefinitely as an open research archive.
- Other services: according to their own policies.
12. Your rights regarding your personal information
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy of it;
- rectification — have inaccurate data corrected;
- erasure — have your data deleted;
- restriction of processing;
- object to processing based on our legitimate interest;
- data portability;
- withdraw consent at any time, where processing is based on consent.
We do not sell personal data, do not share it for targeted advertising and do not make decisions about you based solely on automated processing, so there is nothing to opt out of in that respect.
To exercise your rights, write to contact@leikuruab.com and we will answer within one month. We may ask for details that help us find your data and confirm that the request is yours — for website logs, for example, the IP address and approximate time of your visit. If someone makes a request on your behalf, we may ask for proof that they are authorised. If you live outside the EU, you can send us the same requests.
Your measurement history is stored on your own device, and you control it there. For data received by M-Lab or another service listed above, contact that service as described in its policy.
You also have the right to lodge a complaint with a supervisory authority. In Lithuania this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), vdai.lrv.lt.
13. How to change your preferences
You decide what the app does and what it keeps.
In the app
- History: clear it in Settings → Interface; deleting the app removes both the history and the settings.
- DNS resolver: in Settings, choose which resolver handles the host names you check — your device's resolver, Google Public DNS, Cloudflare, Quad9, AdGuard DNS or an address you enter.
- Checks: the host check, the Services check and the DNS check run only when you start them.
- Speed test: a test starts only when you start it, but note that M-Lab receives your IP address as soon as the speed test screen looks for nearby servers.
- Sharing: nothing leaves the app through sharing until you tap Share.
- Language and theme: Settings → Interface.
Notifications and emails
There are no newsletters or mailing lists to unsubscribe from, the app sends no push notifications, and we do not pass personal data to anyone for their own marketing.
Location
The app never asks for access to your location, so there is no location permission to switch off.
On the website
To remove the saved theme, clear the site data for nerpspeed.com in your browser.
Data we hold
To access, correct or delete your website log entries or our correspondence with you, write to us (section 12).
14. Contact details
There is no separate privacy portal: send any privacy question or request by email. We answer in English and Russian.
LEIKUR, UAB, Gedimino pr. 20, LT-01103 Vilnius, Lithuania — contact@leikuruab.com
15. Children
The app and the website are not directed at children under 14, and we do not knowingly collect their personal data. The app has no accounts and does not ask for your age. If you believe that a child under 14 has sent us personal data, for example by email, let us know and we will delete it.
16. How this Privacy Policy may change
We may update this policy when the app or the website changes. The date at the top shows the latest version. If a change is significant, we will also point it out on the website or in the app. This policy is available in English and Russian (Русская версия).