Privacy Policy

• Account information. When you use Google sign-in, we receive your Google account identifier, verified email address, and name. We store these privately to identify your account, together with your chosen public username and account timestamps. If you add them, we also store your public bio, selected country, Discord username, and LinkedIn profile URL. We do not display your Google name or email on public profiles, and do not retain or display your Google profile picture.
• Benchmark submissions. We store the signed report and included logs you choose to upload, plus searchable results derived from them. Depending on the report, this includes the model and quantisation, runtime and version, chip and backend, token counts, throughput, memory and thermal measurements, timestamps, run identifier, installation public key and signature, and other included diagnostic fields. The installation identifier can link reports from the same installation.
• Service and security information. We process browser session cookies, device-authorisation requests, hashed CLI credentials, operational records, and the usage analytics described under Cookies, analytics, and Google sign-in. To limit abuse, we temporarily store keyed, non-reversible identifiers derived from client IP addresses or a trusted Tailscale proxy identity; we do not store the raw source value in the rate-limit table. Hosting and network infrastructure may separately process IP addresses, request information, and error logs to deliver and protect the service.
• Messages to us. If you contact us, we receive your contact details and the information you include.

You can browse without an account and run benchmarks offline without signing in. Local reports are not sent to ComputeArena merely because you run a benchmark or log in. Account information is needed for account features, and uploaded report fields are needed to process a submission.

Your chosen username, optional bio, selected country and social details, join date, submitted benchmark activity, hardware summaries, and derived statistics appear on public profiles and directories. The website and API provide a derived public report containing model, runtime, chip, backend, workload settings, and aggregate prefill and decode throughput. It excludes environmental and power telemetry, memory observations, raw timing samples, installation identity and signature material, report hashes, and storage metadata. Other people may download, copy, or analyse the public data.

When signed in, you can retrieve the original report for a submission attributed to your account. Other users and anonymous visitors receive only the derived public report. Base Compute and service providers still process and store the complete uploaded report to verify, operate, secure, and maintain ComputeArena.

Review the upload preview before submitting. Do not upload secrets, access tokens, personal file paths, confidential prompts, or another person’s information. Older reports or custom harnesses may include additional fields. We keep the original signed file to verify its integrity, so we cannot silently redact it without changing what was signed. Contact us to request removal of a report containing personal or confidential information.

We use information to authenticate accounts and connected CLIs, publish the benchmarks you submit, calculate comparisons and community statistics, detect duplicates and abuse, investigate faults, respond to requests, and meet applicable legal obligations. We do not sell Google account information or use it for advertising.

Where the GDPR applies, our bases for processing are performance of our agreement with you for account and submission features; legitimate interests in securing, maintaining, and improving a reliable benchmark service and answering enquiries; and compliance with legal obligations where applicable. Where a feature requires consent, we will ask separately and explain how to withdraw it. Acknowledging this policy is not blanket consent to unrelated uses.

We do not use these data to make automated decisions that produce legal or similarly significant effects on you. Leaderboard positions and profile statistics are calculated from submitted benchmark results.

We use essential cookies for sign-in, session security, and the authentication flow. Blocking essential cookies can prevent sign-in. Signing out ends your browser session; CLI authorisation is managed separately.

We use Google Analytics to see which pages, models, and comparisons people use. It sets analytics cookies named _ga, which hold a random identifier, only after you choose Accept in the cookie notice. Before you choose, or if you decline, it runs without cookies and sends Google only signals with no identifier that persists between visits. With cookies, it reports page views to Google together with the page address, an approximate location derived from your IP address, and browser and device details. A page address can include a public username when you view a profile; account identifiers, email addresses, and benchmark report contents are never sent. Google processes this information for us as described in how Google uses information from sites that use its services. Your choice is stored in your browser and can be changed at any time with Cookie choices in the page footer. You can also stop this collection with the Google Analytics opt-out browser add-on or by blocking googletagmanager.com; the site works without it. We do not use advertising cookies.

Google handles your Google password; we do not receive it. We request the standard OpenID, email, and profile scopes, not access to Gmail, Drive, or other Google content. Google’s handling of information is described in its Privacy Policy. You can manage the connection in your Google account; removing that connection does not itself delete an existing ComputeArena account or uploaded reports.

Public benchmark information is shared as described above. Access to private information is limited to authorised personnel and providers needed to operate the service, including authentication, hosting, database, storage, and security services. We may also disclose information when required by law or reasonably necessary to protect people, investigate abuse, or establish or defend legal rights.

Google provides authentication and analytics. Infrastructure differs between local staging and production deployments, so processing locations can differ. Information may be processed outside your country, including through Google’s international infrastructure. Contact us for the providers and locations relevant to your deployment. Where applicable law requires safeguards for an international transfer, those safeguards must be in place before that transfer.

We retain account information while needed to provide your account. Public reports are retained to support benchmark history and comparisons unless removed. Security records and support messages are retained according to their operational purpose, investigation needs, and applicable legal obligations. Expired credentials no longer authorise access, but expiry is not necessarily deletion of the associated database record.

Deletion requests are handled through the contact address below. Backups may retain information until replaced or removed, and legal obligations may require limited retention. We will explain relevant exceptions when responding. We cannot guarantee deletion of copies that other people have already downloaded.

We use access controls and authentication protections, and verify signatures on uploaded reports. No service is completely secure. A report signature checks integrity relative to its signing key; it does not prove that measurements from a user-controlled device are truthful.

Email hi@basecompute.co to request access, correction, account deletion, or removal of your reports, or to raise a privacy concern. Tell us your public username and relevant report identifiers where possible; do not send passwords or CLI tokens. We may need to verify your identity before acting.

Depending on the laws that apply to you, you may also have rights to erasure, restriction, portability, objection to processing based on legitimate interests, and withdrawal of consent where consent is used. These rights can have exceptions. We will respond within the time required by applicable law and explain any refusal.

You may complain to your local data protection authority. In Australia, this includes the Office of the Australian Information Commissioner; in the EEA, your national supervisory authority. You can contact us first so we can investigate, without limiting your rights.

We will update this page when our practices change and revise its date. We will bring material changes to your attention where required. Questions about this policy should be addressed to Base Compute Pty. Ltd. at hi@basecompute.co.

See also our Terms of Service.