Privacy Policy

Effective Date: August 16, 2026

Last Updated: August 16, 2026

(Previous versions of this policy are available upon request)

At a Glance: Summary of Key Points

What personal information do we collect? We collect identifiers (like your IP address, name, and email if you provide them), device information, usage analytics, and internet activity related to how you interact with our reaction tests.
Do we process any sensitive personal information? No. We do not collect or process sensitive personal information like race, religion, or biometric data.
Do we collect information from third parties? Yes, we receive technical and analytics data from our infrastructure and analytics partners to help our site run smoothly.
How do we use your information? We use your data to deliver our reaction time tests, calculate your performance benchmarks, secure our website, and send marketing communications if you have opted in.
Who do we share your personal information with? We share data with essential service providers (like analytics and security vendors). Under certain US state laws, our use of analytics cookies is considered "sharing" or "selling" data.
What are your privacy rights? Depending on where you live, you have the right to access, correct, delete, or port your data, as well as the right to opt out of marketing and data sales/sharing.
How can you contact us? You can reach us anytime at contact@reactiontest.app.

1. Introduction

Welcome to ReactionTest. We provide free online tools and training games designed to measure and improve your visual and auditory response speed, decision-making, attention, accuracy, and consistency. To make these tests work seamlessly and to help you track your performance over time, we need to process certain information about you and your device.

We believe that privacy is a fundamental right, not just a legal requirement. This Privacy Policy explains in plain language how we collect, use, and protect your personal information when you visit https://reactiontest.app. It also outlines your rights under global privacy laws, including the GDPR, UK GDPR, PIPEDA, CCPA/CPRA, and other US state privacy laws.

If you have any questions about how we handle your data, please reach out to us at contact@reactiontest.app.

2. What We Collect & Why

We only collect information that helps us deliver, secure, and improve our reaction tests. Here is a breakdown of what we collect and our legal basis for doing so:

Information You Give Us Directly

While you can take our tests without creating a formal account, you may choose to provide us with your name and email address to receive marketing communications, track your performance over time, or contact support.

Legal Basis: Consent (when you opt-in to marketing) and Legitimate Interest (to respond to your inquiries).

Information We Collect Automatically

When you visit ReactionTest, our servers automatically record certain technical data. This includes your device information (such as browser type and operating system), cookies and tracking data, usage analytics (how you interact with our tests), and technical logs (including your IP address). We need this data to calculate your reaction speeds accurately and ensure the site functions properly.

Legal Basis: Legitimate Interest (to ensure network security and optimize performance) and Consent (for non-essential tracking cookies).

Information from Third Parties

We receive aggregated analytics and security data from our third-party partners, specifically Google Analytics and Cloudflare. This helps us understand global performance benchmarks and protects our site from malicious traffic.

Legal Basis: Legitimate Interest (to protect our services and analyze user trends).

3. How We Use Your Information

We use the information we collect for specific, limited purposes:

Core Service Delivery: We use your device data and technical logs to run the interactive tests, measure your reaction times, and display your results.
Service Improvement and Personalization: We analyze usage data to create global benchmarks, allowing you to compare your scores with others. This also helps us design better training games.
Communication: If you reach out to us, we use your contact information to reply.
Security and Fraud Prevention: We monitor technical logs to detect unusual activity, prevent cheating on our leaderboards, and defend against cyber attacks.
Marketing: With your permission, we use your email to send you promotional activities and updates about new reaction tests. You can opt out of these communications at any time.
Legal Compliance: We may process your data to comply with applicable global laws and regulations.

5. Your Privacy Rights

No matter where you live—whether covered by the GDPR in Europe, PIPEDA in Canada, or state laws in California, Virginia, Colorado, Connecticut, or Texas—we grant you the following rights regarding your data:

Access Your Data: You can request a copy of the personal information we hold about you. We will provide this within 30 days.
Correct Inaccuracies: If your information is wrong, let us know and we will update it.
Delete Your Data: You can ask us to erase your personal data. We will do so unless we have a legal obligation to keep it.
Port Your Data: You can request your data in a structured, commonly used, and machine-readable format to transfer to another service.
Opt-Out of Marketing & Sharing: You can easily unsubscribe from marketing emails via the link in the email footer. You can also opt out of data sharing/selling via our website footer or an authorized agent.
Withdraw Consent: Where we rely on your consent, you can withdraw it at any time. This will not affect the legality of our processing before you withdrew consent.
Lodge Complaints: You have the right to complain to a data protection authority about our privacy practices.

To exercise any of these rights, please email contact@reactiontest.app.

6. Data Security

We take the security of your reaction times and technical data seriously. We use industry-standard encryption (HTTPS) to protect data in transit, and we rely on Cloudflare's robust security infrastructure to manage access controls and monitor for vulnerabilities.

However, we want to be honest: no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You can help protect your data by using secure networks and keeping your device software up to date.

In the unlikely event of a data breach that compromises your personal information, we will notify you and the relevant authorities within the timeframes required by law (typically within 72 hours).

7. Data Retention

We keep your personal information only as long as necessary to fulfill the purposes outlined in this policy. Our retention logic is as follows:

Active Usage Data: We keep your performance data and benchmarks for as long as you actively use our service, plus a reasonable buffer of 24 months of inactivity, so you don't lose your progress.
Technical Logs: Server logs and IP addresses are retained for 12 months for security auditing and troubleshooting purposes, after which they are automatically deleted.
Marketing Preferences: We keep your contact information until you withdraw your consent or opt out.
Legal Records: Any data related to legal compliance or financial records (if applicable) is kept for 7 years to meet statutory requirements.

8. Cookies & Tracking

ReactionTest uses cookies and similar tracking technologies to make our site work and to understand how users interact with our tests.

Essential Cookies: These are necessary for the website to function (like remembering your test progress during a session) and cannot be switched off.
Analytics Cookies: We use Google Analytics to collect usage data. This helps us see which tests are most popular and where we need to improve.

You can manage your cookie preferences at any time through the cookie banner on our website or by adjusting your browser settings.

9. Children's Privacy

Our reaction tests are designed for a general audience. We do not knowingly collect personal information from children under the age of 13 (in the US) or 16 (in the EU/EEA and UK). If you are a parent or guardian and believe your child has provided us with personal data, please contact us at contact@reactiontest.app. If we discover that we have inadvertently collected data from a child without parental consent, we will delete it immediately.

10. International Transfers

ReactionTest operates globally. To provide our services, your data may be transferred to, stored, and processed in countries outside of your home jurisdiction, including the United States.

When we transfer data originating from the EU, EEA, or UK to other countries, we ensure it is protected by appropriate legal safeguards. We rely on Adequacy Decisions where applicable, Standard Contractual Clauses (SCCs) approved by the European Commission, or your Explicit Consent. Your privacy rights remain fully intact regardless of where your data is processed.

11. Changes to This Policy

Privacy laws and our business operations evolve, so we will occasionally update this Privacy Policy. When we make significant changes, we will notify you by posting a prominent notice on our website or sending you an email (if you have provided one).

The "Last Updated" date at the top of this page indicates when the latest changes took effect. Any data collected under a previous version of this policy will continue to be treated in accordance with the commitments made at the time it was collected.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, we are here to help. You can reach us through the following methods:

Privacy Email: contact@reactiontest.app
Website: https://reactiontest.app

We aim to respond to all privacy-related inquiries within 7 to 14 business days.

13. Categories of Personal Information Collected (CCPA/CPRA)

For residents of California and other applicable US states, the following table details the categories of personal information we have collected in the past 12 months, our purpose for collecting it, and our retention criteria.

Sensitive Personal Information: We do not collect or process any sensitive personal information. Therefore, the right to limit the use and disclosure of sensitive personal information does not apply to our services.

Category	Sources	Business Purpose	Categories of Third Parties Disclosed To	Retention Period
Identifiers (e.g., IP address, name, email)	Directly from you; Automatically via your device	Service delivery, communication, marketing, security	Analytics providers (Google Analytics), Security providers (Cloudflare)	Until consent is withdrawn, or 12 months for technical IP logs
Internet Activity (e.g., browsing history on our site, interaction with tests)	Automatically via cookies and tracking data	Service improvement, calculating benchmarks, analytics	Analytics providers (Google Analytics)	24 months after last active use
Geolocation Data (e.g., general location derived from IP)	Automatically via your device	Analytics, localization, security monitoring	Analytics providers, Security providers	12 months
Inferences (e.g., performance trends, reaction speed profiles)	Derived from Internet Activity and Usage Analytics	Personalization, creating training games and benchmarks	Analytics providers	24 months after last active use

14. Automated Decision-Making

ReactionTest uses algorithms to calculate your reaction times and compare them to global benchmarks. However, we do not engage in any automated decision-making or profiling that produces legal effects or similarly significant effects concerning you (as defined under GDPR Article 22).

15. Privacy Signals

We respect your right to privacy and autonomy. ReactionTest honors the Global Privacy Control (GPC) signal. If you have enabled GPC in your browser or extension, our website will automatically recognize this signal and opt you out of the "sale" or "sharing" of your personal information, in compliance with the laws of California, Colorado, Connecticut, Montana, Texas, and other applicable jurisdictions.

16. Sub-Processors

To run ReactionTest effectively, we engage third-party vendors known as sub-processors. Our current sub-processors are:

Google Analytics (Data analytics and performance tracking)
Cloudflare (Content delivery network and security)

We maintain a current, comprehensive list of all sub-processors. You can request this list at any time by emailing us. Furthermore, customers can subscribe to be notified via email before any new sub-processor is added to our operations by contacting contact@reactiontest.app.

17. EU/UK Representative

At this time, ReactionTest has not appointed a dedicated EU or UK Representative under GDPR Article 27. All privacy inquiries from residents of the European Economic Area and the United Kingdom should be directed to our primary contact email at contact@reactiontest.app.

18. Supervisory Authority

If you believe our processing of your personal data violates data protection laws, you have the right to lodge a complaint with a supervisory authority.

In the UK: You may contact the Information Commissioner's Office (ICO).
In the EU/EEA: You may contact the specific Data Protection Authority (DPA) in your member state of residence.
In California: You may contact the California Privacy Protection Agency (CPPA).
In Canada: You may contact the Office of the Privacy Commissioner of Canada (OPC).

We would, however, appreciate the chance to deal with your concerns directly before you approach an authority, so please contact us in the first instance.