Privacy policy
The rule everything follows
Your video and audio never leave your device. The test tools run entirely in your browser. web.camera has no capability to receive, store or view your camera or microphone streams — the code to do so simply does not exist on this site.
What we store when you submit a rating
Only what you see in the form plus technical measurements: star rating, optional one-line review (max 180 characters), camera model label as reported by your browser (including the USB vendor and product id when the browser embeds it in the label — that id is how we recover the manufacturer), the camera name as you typed or confirmed it in the form, your device type or model as your browser exposes it to every website (e.g. "iPhone", "Pixel 7" — never more than that), measured resolution and FPS, light percentage, a count of exposed capability fields, browser family (e.g. "Chrome"), OS family (e.g. "Windows"), interface language, and a random submission token generated by your browser.
IP addresses
Raw IP addresses are never written to our database. For abuse protection we store a SHA-256 hash of your IP combined with a salt that rotates every day — yesterday's hashes cannot be linked to today's, and the hash cannot be reversed to your address.
Analytics, only with your consent
We use Google Analytics 4 to count visits and see which tools get used. It runs only if you accept the cookie banner — decline, and no request is made to Google at all. The legal basis is your consent (Art. 6(1)(a) GDPR), and you may withdraw it at any time via Cookie settings in the footer, with no effect on the lawfulness of what came before (Art. 7(3)). There are no advertising pixels, no fingerprinting and no cross-device tracking; Google signals is switched off. Every cookie is itemised on the cookie page.
Retention
Approved reviews stay in the public database. Pending and rejected submissions are purged after 24 months. Server logs rotate within 30 days.
Deletion requests
After submitting a rating you are shown a submission ID. Send it via the contact page and we will delete the associated review. This is your GDPR right to erasure — no questions asked.
Legal basis
The rating and review themselves are processed on the basis of your consent (Art. 6(1)(a) GDPR), given by pressing Submit. Rating is entirely voluntary: nothing on this site is withheld if you decline, and you are under no statutory or contractual obligation to provide any of it. The anti-abuse metadata that accompanies a submission — the daily-rotating IP hash and the rate limits tied to the browser token — is processed under our legitimate interest (Art. 6(1)(f) GDPR) in keeping the public database free of spam and manipulation; a submission cannot be accepted without it.
Who the controller is
The data controller is INTERNET USLUGE, vl. Mato Tominac, Bože Huzanića 76, 10370 Dugo Selo, Hrvatska (OIB 28865646619), reachable at hello@web.camera. Full registration details are on the legal notice.
Who else touches the data
Hosting is provided by Hetzner Online GmbH (Nuremberg, Germany), which processes server log data on our behalf under a data processing agreement. If you consent to analytics, Google Ireland Limited (Ireland, with onward transfer to Google LLC in the United States) processes usage data on our behalf; that transfer outside the EU/EEA relies on the EU–US Data Privacy Framework, and the data is retained for 14 months. There are no other recipients — no ad networks, no data brokers — and if you decline analytics, the host remains the only one.
Your rights
You have the right to request access to your data, its rectification or erasure, restriction of processing, and portability, and to object to processing (Art. 15–21 GDPR). You may withdraw your consent at any time; that stops any further processing but does not make what happened before the withdrawal unlawful. The practical route for all of these is the contact page, quoting your submission ID.
Complaints
If you believe your data has been handled unlawfully you have the right to lodge a complaint with a supervisory authority. Ours is the Agencija za zaštitu osobnih podataka (AZOP) — azop.hr. You may also complain to the authority where you live or work.