1. Controller and contact
The controller is Graham Miranda UG (haftungsbeschränkt), Hasselfelder Str. 23, 38889 Blankenburg (Harz), Germany, represented by Graham Craig Miranda. Privacy requests: [email protected]. Telephone: +49 156 78397267. There is no separate data protection officer contact published for this website; privacy enquiries reach the controller directly.
2. Visiting this website
Loading the website necessarily transmits connection data such as your IP address, request time, requested path, browser information and technical response data to our server and its content-delivery network. These data support delivery, reliability and security. Where the controller processes these data for those purposes, the intended legal basis is Article 6(1)(f) GDPR: the legitimate interests of operating and protecting the website. Providing connection data is technically necessary to load a page, not a contractual obligation to disclose additional information. No automated decision with legal or similarly significant effects is made by this website.
3. Hosting environments
The public website https://pingatlas.grahammiranda.network runs on the controller’s own server, rented from OVH SAS and located in Frankfurt am Main, Germany. Pages are generated and delivered by this server; no separate content-hosting processor is used and the server’s own logs stay in Germany. The server keeps ordinary web access and error records (IP address, time, requested path, user agent and response status) for delivery, reliability and security. Cloudflare, Inc. operates the content-delivery network and security proxy in front of the server; it therefore processes connection data and may set a strictly necessary security cookie when it triggers a bot challenge. Cloudflare’s global network and OVH provide infrastructure services under their own terms. An earlier owner-private preview on OpenAI Sites remains a separate environment whose platform processing is described by https://openai.com/policies/privacy-policy/. The website itself has no account database, advertising, analytics SDKs or fingerprinting.
4. Browser diagnostics and sharing
The embedded app starts in EXAMPLE mode, using local illustrative test data without measurement or probe-directory requests. You may choose a public preset or enter a public host you are authorised to test. No device geolocation is requested. In LIVE worldwide mode, the app asks permission before contacting api.globalping.io. Globalping receives your public IP address, request metadata, public target, manually selected origin filters, transport, IP family and sample count. Independent probes perform ICMP or TCP tests and return their reported origin city, country, network and results. These locations describe probes, not your device. Measurement IDs and technical results can be publicly accessible; do not submit sensitive hostnames. Directory requests may run after permission while LIVE mode is active. Permission can be revoked in Settings; it stops future requests and client retrieval but cannot recall work already submitted or delete third-party results. The intended GDPR basis for this optional third-party feature is your affirmative consent under Article 6(1)(a), which must cover the actual disclosed processing. Globalping also applies its own privacy policy and terms. Provider-side retention and legal-role arrangements still require confirmation before public launch. Device mode in this browser connects directly to the displayed HTTPS endpoint. That target and its infrastructure see your IP and ordinary connection metadata. Such connections are requested by you to perform diagnostics; the intended basis is Article 6(1)(b) where necessary to provide the requested service. Browsers cannot perform native device ICMP, and CORS may prevent a result. Website-demo settings, permission, custom targets, favourites, history and results stay in page memory, including after app navigation, and reset when reloaded or closed. CSV/JSON files are generated locally on request; shared or downloaded copies remain wherever you save them. The standalone native project has separate local persistence of up to 100 completed tests; that is not enabled in this website web build.
5. Preferences and cookies
The selected theme exists in memory and the URL query as theme=dark or theme=light. The website starts in its dark theme unless its URL specifies light; it does not store a persistent theme identifier. The website language is encoded in the page path as /en or /de. Older lang=en or lang=de query links redirect to the corresponding language path. There are no website-authored cookies, localStorage or sessionStorage entries. On ordinary page loads neither our server nor Cloudflare sets a cookie; Cloudflare may set a strictly necessary security cookie only when it triggers a bot challenge. The website loads no optional marketing tracking. The app has a separate affirmative sharing prompt before worldwide diagnostics; this is not a marketing-cookie banner. Adding analytics, advertising, remote embeds or other non-essential device access requires a new assessment and, where required, prior consent under section 25 TDDDG and the GDPR.
6. Contacting us
If you email or call us, we process the details you choose to provide, such as your name, email address and message, to answer your enquiry. Article 6(1)(b) GDPR applies to contract-related enquiries; Article 6(1)(f) applies to other correspondence, based on our legitimate interest in responding. Do not include passwords or unnecessary sensitive information. Correspondence is kept while needed to answer and resolve the enquiry and, where applicable, to meet statutory retention requirements or establish, exercise or defend legal claims. Contact email is provided through Zoho Mail. Correspondence is deleted once the enquiry is resolved and after any applicable statutory retention or limitation period.
7. Recipients and international transfers
Recipients can include the infrastructure provider OVH SAS, the content-delivery and security provider Cloudflare, Inc., the email provider Zoho Mail, professional advisers where necessary, and authorities where disclosure is required by law. No personal data are sold and the website code does not share personal data for targeted advertising. User-requested diagnostics additionally involve Globalping, independent probe operators and selected target operators as described above. Their own policies govern their processing and requests concerning their records. Infrastructure and support may involve access outside the EEA. Such transfers require an applicable legal mechanism, for example an adequacy decision or standard contractual clauses with appropriate safeguards under Articles 44–49 GDPR. The website’s own server and logs are located in Germany. Delivery through Cloudflare’s global network may involve access outside the EEA under Cloudflare’s own safeguards; do not assume EU-only processing or a particular adequacy certification from this notice. You can request further information at the privacy contact.
8. Your rights
Subject to the applicable conditions, you can request access, correction, erasure, restriction and data portability. You can object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing; optional worldwide tests rely on the disclosed affirmative permission. You may complain to a supervisory authority, including the Landesbeauftragte für den Datenschutz Sachsen-Anhalt or the authority where you live or work. GDPR requests are normally answered within one month; a permitted extension will be explained. We may request proportionate information to verify a request, without asking for unnecessary identity documents. Authority website: https://datenschutz.sachsen-anhalt.de/
9. Visitors outside the EU
People outside the EU may contact the same address to exercise rights available under their local law. Depending on applicability, these may include access, correction, deletion, an explanation of processing, objection, or an appeal. The website has no sale or sharing for cross-context behavioural advertising. It does not run marketing trackers regardless of a browser’s Global Privacy Control or Do Not Track setting. This is a description of current website behaviour, not a claim that every jurisdiction’s statutory requirements have been independently assessed. Mandatory local protections remain unaffected.
10. Children and changes
This website is not directed at children and does not ask for an age, child profile or other child-specific data. If you believe a child has sent unnecessary personal information, contact us. This notice is updated when the app, hosting, data flows, tools or contact details change.
11. Retention by data category
Demo settings, permission and measurement history: page memory only, cleared on reload or closing the session. Downloads: kept in the location you choose until you delete them. Server access and error logs: rotated weekly with five rotations retained, so they are normally overwritten after about five weeks; the system journal is capacity-limited to 500 MB. Contact correspondence: stored in the Zoho Mail mailbox until the enquiry is resolved and for any applicable legal retention or limitation period. Globalping and target-operator records: separate third-party records; their retention and deletion cannot be controlled by clearing this demo. We do not promise a fixed third-party deletion period.
12. International privacy requests
Send requests to [email protected], call +49 156 78397267 or write to the controller address above. No PingAtlas account is needed. Specify the right you wish to exercise and enough information to find the relevant correspondence or result; do not send passwords or unnecessary identity documents. Where UK or other local privacy law applies, mandatory rights and complaint routes remain available. Where applicable US state law provides rights to know, correct, delete, obtain a copy, opt out or appeal a refusal, use the same contact; a refusal will explain any available appeal route. We do not sell personal information or share it for cross-context behavioural advertising, and do not penalise a person for exercising applicable rights. Diagnostic disclosure is described separately above. These statements do not claim that every jurisdiction applies or that the company meets every statutory threshold.