Privacy Policy

Last updated: 8 November 2026

This policy explains what data this website and the gpucheck service at gpucheck-api.fly.dev collect, and what happens to it. The short version: the tool runs locally, uploading is opt-in, we collect as little as we can, and there are no trackers.

1. Who is responsible

The data controller is Narek Keshishyan. Contact: support@gpucheck.dev.

2. This website

This website is a static site. It sets no cookies, runs no analytics, and loads no third-party scripts, fonts, or trackers. Our hosting provider may keep standard server logs (IP address, request time, user agent) for security and operations.

3. The CLI tool

The gpucheck CLI runs entirely on your machine and sends nothing anywhere unless you choose to upload a result. It is open source, so you can verify this yourself.

4. What an upload contains

If you opt in to uploading, the tool sends result.json, which contains:

• GPU model and driver version;
• telemetry samples from the run (temperature, clocks, power, throttle reasons, measured throughput);
• the tool's findings and timing information;
• a salted-hash card identifier — a one-way hash derived from the GPU's UUID. The raw UUID never leaves your machine. The hash lets repeat runs of the same card be linked without exposing the identifier itself.

Uploads do not include your hostname, user name, IP-derived location, file paths, or any other system information. There are no user accounts.

5. Result pages and retention

Uploaded results are published on a public result page. Anyone with the link can view them, so don't upload a result you want kept private. Each upload returns a delete token; using it removes the result page. We keep results until you delete them. For paid certificates, we retain the signed certificate record (grade, telemetry summary, card-identifier hash, signature) for as long as certificate verification and revocation checking must work, even if the free result page is deleted.

6. Payments

Certificate payments are handled by Paddle.com as merchant of record. Paddle collects the data needed to process your payment (name, email, payment details, billing country) under its own privacy policy. We do not receive or store your payment card details; we receive from Paddle what is needed to issue the certificate and handle support, such as the transaction reference and the buyer email.

7. Email

If you email us, we keep the correspondence as long as needed to handle your request and any follow-ups. We don't send marketing email and we don't share your address.

8. Where data is processed

The service runs on Fly.io infrastructure; Paddle processes payments. These providers may process data outside your country. We don't sell data or share it with anyone else, except if required by law.

9. Legal bases

Where the GDPR or a similar law applies, we process data on these bases: performing our contract with you (issuing certificates, hosting a result you asked us to publish), your consent (the opt-in upload itself), and our legitimate interests (keeping the service secure, preventing fraud and abuse, and operating server logs).

10. Security

Traffic to the service is encrypted in transit (TLS). We store the minimum we can: no accounts, no raw hardware identifiers (only the salted hash), no payment details. No system is perfectly secure, but there is very little here to lose.

11. Children

The Service is not directed at children and we do not knowingly collect personal data from anyone under 16.

12. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export personal data about you, and to complain to a supervisory authority. The fastest route for deletion of a result is the delete token; for anything else, email support@gpucheck.dev and we will respond within a reasonable time.

13. Changes

If this policy changes, the "last updated" date above will change, and material changes will be noted on this website.