Privacy policy

1. Summary

This policy explains what happens to your personal data when you visit mousetests.org. Personal data is any information that can identify you, such as your IP address.

• The mouse tests send nothing. The clicks and scroll events a test records are processed only by your browser, on your device, and are deleted when you reset the test or leave the page.
• Privacy-friendly statistics. We count visits with Cloudflare Web Analytics. It sets no cookies and does not follow you across websites.
• Ads only track you with your consent. We show ads from Google AdSense. Google uses cookies for ads only if you agree, and you can change your choice at any time under "Privacy settings" at the bottom of every page.
• Our host sees basic technical data. Like every website, our host receives your IP address and browser details when it delivers a page. This is needed to run the site securely.
• You have rights. You can ask what data we hold about you, and have it corrected or deleted.

2. Who is responsible

The controller responsible for data processing on this website is:

Email: contact@mousetests.org

The controller is the person or body that decides why and how personal data is processed. We are established in Portugal, so our lead supervisory authority is the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD). Full provider details are on the legal information page.

3. Hosting

This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA ("Cloudflare"). Cloudflare delivers the pages from a worldwide network of servers (a content delivery network, or CDN) and protects the site from attacks.

To do this, Cloudflare processes the technical data of every request, in particular your IP address and the details listed under "Server log files" below. If it detects unusual traffic, Cloudflare may set a strictly necessary security cookie (such as __cf_bm) to tell people from bots. See Cloudflare's privacy policy:https://www.cloudflare.com/privacypolicy/.

The legal basis is our legitimate interest in a fast, reliable and secure website (Art. 6(1)(f) GDPR). Storing a strictly necessary security cookie does not require consent.

Data may be transferred to the USA. Cloudflare is certified under the EU-US Data Privacy Framework, and the European Commission's standard contractual clauses also apply. We have a data processing agreement with Cloudflare under Art. 28 GDPR, so Cloudflare processes visitor data only on our instructions.

4. Data we process

The mouse tests

While a test runs, it records mouse events such as the button pressed, the scroll direction and precise timestamps. A script in your browser analyses them on your device. They are kept only in memory, are never sent to us or anyone else, and are deleted when you reset the test or close the page.

The "Copy results" button copies a summary to your device's clipboard. The summary contains the test result and the name and version of your browser and operating system. Nothing is sent to us. What you do with the copied text is up to you.

Visitor statistics (Cloudflare Web Analytics)

We use Cloudflare Web Analytics, a service of our host Cloudflare, to see how many people visit which pages. A small script records the page address, the page you came from (referrer), your browser, operating system and device type, your country, and how fast the page loaded.

Cloudflare Web Analytics sets no cookies, stores nothing on your device and does not build a fingerprint from your IP address or browser details, so it cannot recognise you on later visits or on other websites. Your IP address is used only to find your country and is not stored with the statistics. We see only totals, such as page views per country, never data about a single visitor.

The legal basis is our legitimate interest in knowing which pages are used, so we can improve the site (Art. 6(1)(f) GDPR). Cloudflare processes this data under the same data processing agreement as the hosting. More information:https://www.cloudflare.com/web-analytics/.

Advertising (Google AdSense)

We show ads from Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The ads pay for the free tests.

With your consent, Google uses cookies and similar technologies to show and measure ads, to limit how often you see the same ad, to prevent fraud, and, if you allow it, to show ads based on your interests. For this, Google processes data such as your IP address, browser details, the pages you visit and your interactions with ads.

When you first visit, a consent message from Google asks for your choice. It is a certified consent tool that follows the IAB Transparency and Consent Framework. Google loads advertising cookies only after you agree. You can change or withdraw your consent at any time with "Privacy settings" at the bottom of every page.

The legal basis is your consent (Art. 6(1)(a) GDPR, and article 5 of Portuguese Law no. 41/2004 for storing and reading information on your device). Data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework. How Google uses data from websites that show its ads:https://policies.google.com/technologies/partner-sites. You can manage personalised ads in your Google account athttps://myadcenter.google.com/.

Cookies and local storage

This website itself sets no cookies and stores nothing in your browser's local storage. Apart from the services named in this policy, it loads no third-party content, such as web fonts or embedded videos. For a possible security cookie from our host, see "Hosting" above. Google AdSense sets cookies only after your consent (see "Advertising" above).

Server log files

Our host automatically collects and stores the following information, which your browser sends with every request:

• browser type and version
• operating system
• referrer URL (the page you came from)
• the page requested
• time of the request
• IP address

We do not combine this data with other sources. The legal basis is our legitimate interest in showing the website correctly and keeping it secure (Art. 6(1)(f) GDPR).

Contact by email

If you email us, we store your message and the personal data in it (such as your name and email address) to answer your request. We do not share it without your consent. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract, and otherwise our legitimate interest in answering messages we receive (Art. 6(1)(f) GDPR). We delete the data when your request is closed, unless you ask us to delete it sooner or the law requires us to keep it.

5. How long we keep data

Unless this policy states a specific period, we keep personal data only until the purpose for processing it no longer applies. If you make a valid request for deletion or withdraw your consent, we delete your data, unless we have another legal reason to keep it, such as tax or commercial record-keeping rules. In that case we delete it once that reason no longer applies.

6. Your rights

Under the GDPR you have the right to:

• get free information about the personal data we hold about you, where it came from, who received it and why it was processed (Art. 15);
• have incorrect data corrected (Art. 16);
• have your data deleted (Art. 17);
• have the processing restricted (Art. 18);
• receive your data in a common, machine-readable format, or have it sent to another controller (Art. 20);
• withdraw any consent you gave, at any time and with effect for the future (Art. 7(3));
• lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work, or where the suspected violation took place (Art. 77). Our lead authority is the Portuguese CNPD (www.cnpd.pt).

Right to object (Art. 21 GDPR): where we process your data based on legitimate interests (Art. 6(1)(f) GDPR), you may object at any time for reasons arising from your particular situation. We will then stop processing it, unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims. If we process your data for direct marketing, you may object at any time, and we will then stop using it for that purpose.

To use any of these rights, contact us at the email address above.

7. Security

This site uses TLS encryption. You can see this by the "https://" at the start of the address and the lock icon in your browser. Please note that data sent over the internet, for example by email, can have security gaps. Complete protection against access by third parties is not possible.

8. Changes to this policy

We update this policy when the website or the law changes, for example when we add a new service. The version on this page always applies.

Last updated: September 30, 2026