Privacy Policy

This Privacy Policy explains how MxMob ("MxMob," "we," "us," or "our") collects, uses and shares information when you visit mxmob.com (the "Site"). MxMob is owned and operated by Ismail Farooq, Lahore, Punjab, Pakistan, who is responsible for your information. The policy is written mainly for visitors in the United States and applies to everyone who uses the Site.

1. The short version

• Our phone diagnostic tests run entirely on your device. Camera video, microphone audio, photos, location, sensor readings, touch input and fingerprint or face scans are never uploaded to our servers. The one exception is a Live Remote Inspection, where the seller agrees first to share test results and photos with the buyer (see below).
• We don't sell your personal information for money. Accounts are free: the free tools ask you to sign in, and Live Remote Inspection works without an account.
• Like most free websites, we show ads through Google AdSense and earn commissions through the Amazon Associates Program. These partners may use cookies.

2. Information processed on your device

When you run a test, your browser may ask for permission to use hardware such as the camera, microphone, location, motion sensors, Bluetooth, NFC or biometric authentication. You can say no, and you can revoke access at any time in your browser's site settings.

• Camera and microphone: the preview, recording and playback happen in your browser's memory and are discarded when you leave the test.
• Location (GPS): coordinates are shown on screen only and are not sent to us.
• Fingerprint and face unlock: we use the standard Web Authentication (WebAuthn) API. Your biometric data never leaves your phone's secure hardware. Some devices may save a passkey named "MxMob Diagnostic", which contains no personal information and can be deleted from your password manager.
• Saved results: diagnostic results and any optional report details you type (such as a phone name, carrier or IMEI) are stored in your browser's local storage so you can resume later. They stay on your device until you tap Clear or clear your browser data.
• Speed test: the Wi-Fi and mobile data test downloads blank test data from our server to measure speed. We don't record the results.

3. Information collected automatically

When you visit the Site, our hosting and security provider (Cloudflare) and our advertising partners automatically receive standard technical information, including IP address, browser type, device type, operating system, referring page, pages viewed and the date and time of your visit. We use this information to deliver and secure the Site, prevent abuse, understand which tools are useful, and show ads.

We also keep our own anonymous count of which pages are opened and which diagnostic tests are run, together with whether each test passed, failed or was skipped. Each count records only the page or test name, your operating system, browser, device model and country. It contains no IP address, no cookie, no identifier and no measurement values, so counts cannot be linked to you or joined into a profile. We use them to find tests that are failing for everyone, which usually means our test is broken rather than the device. If your browser sends a Do Not Track or Global Privacy Control signal, we record nothing at all.

Google Analytics for Firebase

We use Google Analytics (through Firebase) to understand how visitors find and use the Site, such as which pages are viewed, roughly where visitors are and what kind of device they use. Analytics cookies are only stored after you choose Accept All in our cookie banner. Until then, Analytics runs in Google's consent mode without cookies or identifiers. Advertising features of Analytics are switched off. If your browser sends a Do Not Track or Global Privacy Control signal, Analytics isn't loaded at all. Google processes this data under the Google Privacy Policy.

Accounts (optional)

You can sign in with Google or with an email address and password. Sign-in is provided by Google Firebase Authentication, which stores your password; we never see it. When you sign in we keep your account ID, email address, name and profile photo (from Google, if you use Google sign-in), how you signed in, whether your email is verified, and when you joined and last visited. We use this only to run your account and send the notifications described below. To delete your account, write to support@mxmob.com from the email on the account.

Notifications

The bell at the top of the Site shows announcements from MxMob. If you're signed in, it also shows messages for your account, and we remember which ones you've read. If you choose Turn on push notifications, your browser gives us a push token through Google Firebase Cloud Messaging, and we store it with your operating system, browser and, if you're signed in, your account ID. We use it only to send MxMob notifications. You can turn push off at any time in your browser's site settings for mxmob.com.

Report links you create

At the end of a diagnostic you can choose to create a report link (mxmob.com/r/…) to send to a buyer. Only if you tap Create link, we store the pass, fail or skip result and short note for each test you ran, whether the browser measured it, your device model, operating system, browser and screen size as the browser reports them, and any report details you typed, except that the IMEI or serial number is cut to its last 4 characters. Anyone with the link can see this page. Report pages are not listed in search engines. Each report is deleted automatically after 30 days, and you can delete it sooner with Delete link on the device that created it, or by writing to us. To prevent abuse, we count how many links each network creates per day using a one-way hash of the IP address that expires after 24 hours; the address itself is not stored.

Live Remote Inspections (paid)

When a buyer buys a Live Remote Inspection at mxmob.com/inspect, the device being sold sends its test progress to our server so the buyer can watch it live. This only starts after the seller ticks the consent box on the inspection page. We store, for that inspection: what the buyer typed about the listing (model, storage, color, listing link); the pass, fail or skip result and note for each test; the device model, operating system, browser, screen and graphics chip as the browser reports them; the live checks and their answers; any IMEI the seller types; chat messages between buyer and seller; photos taken during camera tests and photo or mirror checks; and a timeline of the session. During camera tests the buyer also sees a low-resolution live preview, which is passed through and not stored. Microphone audio is never sent: only the sound level. If the buyer later runs a handover check on the device they received, we add to the record the same device details from that device, the IMEI they type, their answer about the wear, and the results of any tests they re-run. This record is signed and kept at a private link (mxmob.com/i/…) for 90 days, then deleted with its photos and handover checks. The full IMEI is shown only to the buyer.

Payment Processing & Merchant of Record (Lemon Squeezy): All purchases of Live Remote Inspection are processed by our online reseller and Merchant of Record, Lemon Squeezy (Sold through Link, LLC). When you make a purchase, Lemon Squeezy collects payment and billing information (such as name, email address, billing address, and payment card details) to fulfill the order, calculate and remit required sales taxes and VAT, prevent payment fraud, and process refunds. All payment card processing is performed directly within Lemon Squeezy's secure, PCI-DSS Level 1 compliant environment. MxMob never receives, handles, or stores your credit or debit card numbers. MxMob receives only transaction metadata from Lemon Squeezy (such as the order ID, payment status, and custom inspection identifier) to provision your inspection session. For details on how Lemon Squeezy processes personal data, review the Lemon Squeezy Privacy Policy. To request early deletion of an inspection record, contact us with the inspection record code.

Feedback you send us

At the end of a diagnostic you can tell us whether the report was right. If you choose to send feedback, we store your rating, any tests you mark as wrong, the message you type, your device model, browser, screen size and country, and the pass or fail result of each test in that run. An email address is optional and used only to reply to you. Don't include anything sensitive in the message box. Write to support@mxmob.com to have your feedback deleted.

4. Cookies and similar technologies

Cookies are small files stored in your browser. We use local storage to remember your theme (light or dark), diagnostic progress, which notifications you've read and, if you sign in, your sign-in session (kept by Firebase). Third-party vendors described below may set their own cookies. You can block or delete cookies in your browser settings, though some features may not work as expected.

5. Advertising (Google AdSense & DoubleClick Cookies)

We use Google AdSense to serve advertisements when you visit our website. Google and other third-party vendors use cookies—including the DoubleClick cookie and advertising identifiers—to serve ads based on a user's prior visits to this website or other websites on the Internet.

Google's use of advertising cookies enables it and its partners to serve ads to users based on their visits to MxMob and/or other sites on the Internet. We do not control these third-party cookies.

• Personalized Advertising Opt-Out: You may opt out of personalized advertising by visiting Google Ads Settings.
• Third-Party Opt-Out Portals: You can opt out of third-party vendors' use of cookies for personalized advertising by visiting www.aboutads.info or optout.networkadvertising.org.
• Non-Personalized Ads: When you choose "Essential Only" in our cookie preferences banner, or when browser privacy signals request it, we signal Google AdSense to serve non-personalized ads (which do not use cookies for ad personalization, though cookies may still be used for frequency capping, aggregated ad reporting, and combating fraud and abuse).
• How Google Uses Data: Learn more about how Google uses information from sites that use its services.

6. Amazon Associates

MxMob is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com. When you click an Amazon link, Amazon may set cookies to attribute a purchase to us. Amazon's handling of your information is governed by the Amazon Privacy Notice. See our Affiliate Disclosure for details.

Amazon product recommendation blocks are shown only to visitors in the United States, based on the approximate country our hosting provider (Cloudflare) derives from your IP address, or, when that isn't available, your device's time zone setting, which is checked in your browser. We do not store your IP address, location or time zone for this. To vary the products you see, we set a first-party cookie (mxa_recent) that lists the IDs of the last few products shown to you. It contains no personal information and expires after 24 hours.

7. How we share information

We share information only with trusted service providers that help us operate the Site (Cloudflare for global hosting, DDoS mitigation, and edge compute; Lemon Squeezy as our Merchant of Record and payment processor; Google Firebase for optional authentication and analytics with user consent), with advertising and affiliate partners as described above, when required by law or legal process, or to protect the rights, property, and safety of MxMob, our users, or the public.

8. Your US state privacy rights

Depending on where you live, including California (CCPA/CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states, you may have the right to:

• know what personal information is collected about you and request a copy;
• request correction or deletion of your personal information;
• opt out of the "sale" or "sharing" of personal information for targeted (cross-context behavioral) advertising; and
• not be discriminated against for exercising these rights.

We don't sell personal information for money. The use of advertising cookies by our ad partners may be considered "sharing" under some state laws. You can opt out by using the Google and industry opt-out links above, enabling Global Privacy Control in your browser, or emailing contact@mxmob.com with the subject "Do Not Sell or Share". Because diagnostic data stays on your device, we generally hold no personal information we can link to you. We'll respond to verifiable requests within 45 days.

9. Children's privacy

The Site is intended for a general audience and is not directed to children under 13. We don't knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Data retention and security

Server logs kept by our hosting provider are retained only as long as needed for security and operations. We use HTTPS encryption on every page. No method of transmission over the Internet is 100% secure. Diagnostic results stay on your device unless you choose to send feedback or create a report link. Report links are deleted after 30 days, and Live Remote Inspection records and photos after 90 days. Account details and notification history are kept until you ask us to delete your account. Push tokens are removed when your browser stops accepting them.

11. Visitors outside the United States

MxMob is operated from Lahore, Punjab, Pakistan, and the Site is hosted on Cloudflare's worldwide network, so your information may be processed outside your country. Visitors in the European Economic Area, the UK and Switzerland can ask to see, correct or delete their information by writing to us. Where required, such as in the European Economic Area, the UK and Switzerland, consent for advertising cookies is requested through a Google-certified consent message before personalized ads are shown.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it was last changed.

13. Contact us

Questions or privacy requests: contact@mxmob.com (please include "Privacy Request" in the subject line). Technical support: support@mxmob.com. You can also reach us through our contact page. Postal address: MxMob, Lahore, Punjab, Pakistan.