Your data, respected.

GPADLAB is a browser-based diagnostic platform. When you run a controller test — stick drift, button response, latency, or the full Controller Health Score benchmark — the raw input data is read by your browser's Gamepad API and processed locally in JavaScript. Test results, sensor readings, hardware IDs, and computed scores are never transmitted to our servers.

When you visit any GPADLAB page, our analytics providers (see Section 3) collect standard information: the page URL, referring URL, screen size, general geographic region (typically country or state), browser and device type, and the time of your visit. This is aggregated and anonymized — we can see that 100 people visited the DualSense Edge review page yesterday, but we cannot identify any individual visitor.

When you submit the contact form or email us at contact@gpadlab.com, we receive your name, email address, subject line, and message. We only use this information to respond to your inquiry.

GPADLAB has no user accounts, no login system, and no way to identify individual users across sessions. We do not build user profiles, track browsing behavior across sites, or serve behavioral advertising.

We do not sell, rent, or trade any user data to third parties. We do not participate in advertising networks or retargeting programs.

Test results computed by our diagnostic tools stay in your browser session. When you close the tab, that data is gone. We do not have a copy.

GPADLAB uses three analytics services to understand how the site is used:

• Plausible Analytics — a cookieless, privacy-friendly analytics service compliant with GDPR, CCPA, and PECR. Plausible does not use cookies and does not collect any personal information. See plausible.io/data-policy.
• Cloudflare Web Analytics — server-side analytics that measure core web vitals and traffic patterns without setting cookies or fingerprinting visitors. See cloudflare.com/privacypolicy.
• Google Analytics 4 — used with IP anonymization enabled. GA4 uses one first-party cookie with a short retention window. See policies.google.com/privacy.

You can opt out of Google Analytics tracking at any time by installing the official Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout) or by enabling Do Not Track in your browser.

GPADLAB itself sets no first-party cookies. Google Analytics sets a single first-party cookie (typically _ga) for aggregate visitor counting. This cookie expires after a short period and does not contain personally identifying information.

For more detail on cookies specifically, see our Cookie Policy.

You can block or delete cookies through your browser settings at any time. Blocking analytics cookies will not affect any functionality of GPADLAB — every tool works entirely without them.

When you send us a message through the contact form or by email, we use that data only to respond to you. We do not add contact-form submitters to a marketing list. We do not have a newsletter. We do not sell contacts.

Contact-form submissions are transmitted through Cloudflare Workers and delivered to our email address. Cloudflare processes the request as a data processor. Once we receive the message in our email inbox, standard email retention applies.

If you'd like us to delete a message you sent us, write to contact@gpadlab.com and we'll delete it.

Depending on where you live, you may have rights under privacy laws like GDPR (EU/UK), CCPA (California), or LGPD (Brazil). These typically include:

• The right to know what data we hold about you
• The right to request deletion of your data
• The right to object to processing
• The right to data portability

Because GPADLAB collects almost no personal data and doesn't maintain a user database, most of these rights are automatically satisfied. For any specific request, write to contact@gpadlab.com and we'll respond within 30 days.

GPADLAB is a general-audience site. We don't knowingly collect personal information from children under 13 (US) or under 16 (EU). If you believe a child has provided us with personal information through the contact form, please write to contact@gpadlab.com and we'll delete it.

Analytics data is retained by our providers per their own policies — typically 14 to 26 months in aggregate form. Contact-form submissions are retained in our email inbox for as long as necessary to address the inquiry, and archived thereafter as part of normal email backups.

GPADLAB is operated from Karachi, Pakistan. Our analytics providers and hosting infrastructure (Cloudflare, Google, Plausible) operate globally. If you visit our site from the EU, your data may be transferred to and processed in countries with different data protection laws than yours. We rely on our providers' standard contractual clauses and equivalent safeguards for such transfers.

This policy may be updated to reflect changes in our practices, technologies, or legal requirements. The "last updated" date at the top of this page reflects the latest revision. Substantial changes will be flagged in a prominent site banner for at least 30 days.

Questions about this policy, or about how we handle your data specifically, should be sent to contact@gpadlab.com. We aim to respond within a few business days.