Privacy & cookies

A single cookie, tb_session, is set only when you sign in to an account: it holds a random token that keeps your session open for 30 days. Only the site can read it (HttpOnly) and it is never shared with a third party. Without an account, no cookie is set.

Your browser also keeps locally (localStorage, not a cookie, never sent to the server) your light/dark theme choice and the fact that you have read the cookie notice.

No advertising, analytics or social-network cookies. No third-party script is loaded: fonts are served by the site itself.

Creating an account is optional: the whole site can be browsed without one. An account stores your email address (for signing in and security emails), your username (public, shown on your measurements), your password in hashed form (unreadable, even by us), and the settings you choose to fill in: electricity price, usage profile, graphics cards you own.

For account security, the site keeps the list of your open sessions (date, browser) and API keys (app, CLI); you can revoke them at any time in the settings.

A measurement sent with the app or the CLI contains the benchmark results and the technical description of the machine (graphics card, OS, llama.cpp version). It is published under your username when you are signed in, anonymously otherwise (not linked to any account). No personal data is taken from your machine: no Windows user name, no files, no IP address.

Like any web server, ours keeps connection logs (IP address, requested page, browser) for a few days to detect outages and abuse. They are not cross-referenced with anything and are not used for profiling. The IP address is also held in memory for a few minutes to limit repeated sign-in attempts.

The site only sends account-related emails: sign-up confirmation, password reset, security alerts. There is no newsletter. If we ever create one, it will only be sent to members who explicitly ask for it.

You can view and edit your data in your account settings, and delete your account yourself (“Email & password” → “Delete my account”): the account and all your measurements are then erased immediately and permanently. For any other request (access, rectification, objection), write to contact@tokenbench.fr.

TokenBench is a personal project, published and hosted in France by its author (SephiGame), with no company or commercial activity. Contact: contact@tokenbench.fr.