This policy explains, in plain language, what BlueprintPC Bench collects, why, where it is kept, and the choices and rights you have. It is written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Law 25 (the Act respecting the protection of personal information in the private sector, as amended). This document is informational and is not legal advice.
BlueprintPC Bench is the free, downloadable benchmarking client and public leaderboard at blueprintpc.com. It lets you measure your own computer's hardware and — only if you choose to — share the results anonymously so they appear on a public leaderboard alongside other machines.
1. Who we are
BlueprintPC Bench is operated by a single independent operator based in Canada (the “operator”, “we”, “us”). We are a sole operator, not a company with departments or staff.
Privacy Officer. As required by PIPEDA and Quebec Law 25, the operator is also the designated person accountable for personal information and for handling privacy questions and requests. You can reach the Privacy Officer at [[CONTACT_EMAIL]]. Please put “Privacy” in the subject line so we can respond promptly.
2. The short version
- No account. You do not sign up, and we never ask for your name, email, or any identifying detail to download or use the client.
- Sharing is opt-in. Results leave your machine only when you click “Send results”. If you never click it, nothing is transmitted to us.
- What appears publicly is anonymous — hardware specs and benchmark numbers, not you.
- No cookies, no trackers, no third-party analytics, no advertising profiles in the Bench client or its submission flow.
- No fingerprinting of you or your device. We do not use any technology that identifies, locates, or builds a profile of an individual.
- Your data stays in Canada (Montreal, Quebec).
- We never sell or rent your information, ever.
3. What we collect, and why
We practise data minimization: we collect only what is needed to run the benchmark service and to keep it free of spam and abuse.
3.1 Hardware specifications (a hardware class, not a person)
When you choose to send results, the client transmits the technical specifications of the machine being benchmarked — for example the CPU, GPU, RAM, and disk model and their measured characteristics. This describes a class of hardware, not a person. It contains no serial numbers, no MAC addresses, no user names, no drive paths, and no per-device unique identifier.
To group identical hardware on the leaderboard, our server derives a non-reversible config key from the hardware-class specs you already chose to share (CPU/GPU model, a RAM-size bucket, disk kind). It is computed on the server, is the same for every machine with the same configuration, and contains no per-device or personal identifier. Your client does not send any device fingerprint.
Why: to run, score, and display benchmark results, and to populate the public leaderboard.
3.2 Benchmark result numbers
The numeric scores produced by the benchmark suite (CPU, memory, disk, and GPU measurements). These are performance figures about hardware, not about you.
Why:they are the entire point of the service — to display your machine's results and compare them against others.
3.3 A transient, hashed IP address (anti-spam only)
When you submit results, our server briefly derives a one-way hash of a truncated form of your IP address. We never store the raw IP address. The hash is used only to rate-limit submissions and block spam. It is not used to locate, identify, or profile you.
Why:security and integrity of the service — preventing a single source from flooding the leaderboard with fake or abusive submissions.
3.4 A local cooldown marker (never sent to us)
The client may store a small local “cooldown” timestamp on your own computer to space out repeat runs. This stays on your machine and is never transmitted to us. We never see it.
3.5 If you email us
If you choose to write to [[CONTACT_EMAIL]] we will have whatever you put in that email (such as your email address). We use it only to answer you.
3.6 What we do not collect
- No account, name, or email (unless you voluntarily email us).
- No cookies or tracking technologies in the Bench flow.
- No third-party analytics or advertising SDKs.
- No device fingerprint, no persistent per-device hardware identifier.
- No precise location data.
- No raw IP addresses in storage.
4. Consent and legal basis
- Express, opt-in consent. Nothing about your machine is sent until you take a clear, affirmative action — clicking “Send results”. Before that click, a short collection notice tells you what will be sent.
- Processing for security (the hashed IP). The transient, hashed IP is processed to protect the service from spam and abuse. This is a recognized legitimate purpose under PIPEDA and Quebec Law 25.
- Withdrawing consent. Because submission is anonymous, you can stop sharing at any time simply by not submitting. If you have already submitted and want a specific result removed, contact us (see Section 7) and we will help locate and delete it.
5. Retention
- Submitted results are retained so the public leaderboard and benchmark history remain useful over time. You may request deletion of a specific submission at any time (see Section 7).
- The hashed IP value is transient and minimized — it exists only to support short-window rate-limiting.
- Email correspondence is kept only as long as needed to handle your request, then deleted.
We do not keep personal information longer than necessary for the purposes above.
6. Where your data is stored
All submitted data is stored in a PostgreSQL database hosted in Canada — the ca-central-1 region in Montreal, Quebec (Supabase). Your data stays in Canada and is not routinely transferred or processed outside the country.
Because we do not use any technology that identifies, locates, or profiles an individual, the specific transparency rules in Quebec Law 25 for identification, location, or profiling technologies (section 8.1) are not triggered by this service.
7. Your rights and how to exercise them
Under PIPEDA and Quebec Law 25 you have the right to:
- Access the personal information we hold about you, and be told how it is used and to whom it has been disclosed.
- Correct information that is inaccurate, incomplete, or out of date.
- Withdraw consent / request deletion of information relating to you.
Because the service is anonymous, most submissions cannot be tied back to an individual on their own. To help us act on a request, please describe the submission (hardware, approximate date, result shown on the leaderboard) so we can locate and remove it.
To exercise any of these rights, email the Privacy Officer at [[CONTACT_EMAIL]]. We will respond within the timeframes required by PIPEDA and Quebec Law 25. There is no charge for a reasonable request.
8. Sharing and selling
We do not sell, rent, or trade your information, and we do notshare it with advertisers or data brokers. The only “sharing” that happens is the public, anonymous display of approved benchmark results on the leaderboard — which is the purpose you opted into when you clicked “Send results”. We may disclose information if strictly required by law (for example, a valid legal order), and would limit any such disclosure to what is required.
9. Breach handling
We take reasonable technical and organizational measures to protect the limited data we hold. If a security incident creates a real risk of significant harm (PIPEDA) or a confidentiality incident presenting a risk of serious injury (Quebec Law 25), we will:
- take prompt steps to contain and assess the incident;
- notify the Office of the Privacy Commissioner of Canada (OPC) and, where the incident concerns Quebec residents, the Commission d'accès à l'information du Québec (CAI), as required;
- notify affected individuals where the law requires and where we are able to reach them; and
- keep a record of the incident as required by law.
Given the anonymous design, in most cases we have no way to contact an affected individual directly; where direct notice is not possible we will use a public notice on the site.
10. Children
BlueprintPC Bench is a general-audience tool about computer hardware and is not directed at children. We do not knowingly collect information from children.
11. Changes to this policy
If we change this policy we will update the “Last updated” date above and post the revised version. Material changes affecting how we handle personal information will be highlighted on the site.
12. Contact and how to complain
Privacy Officer (the operator): [[CONTACT_EMAIL]]
If you have a privacy concern, please contact us first — we want to resolve it. You also have the right to complain to the relevant regulator:
- Office of the Privacy Commissioner of Canada (OPC) — priv.gc.ca · 1-800-282-1376
- Commission d'accès à l'information du Québec (CAI) — cai.gouv.qc.ca · 1-888-528-7741 (for Quebec residents)