Privacy Policy
Last updated: November 22, 2025
Introduction
PullCore ("we", "us", "our") is a load-testing service for L7 / L4 / L3 internet resources, designed exclusively for testing users own infrastructure. The service is available at pull.su and operated by PullCore, a registered sole proprietorship located at Oscars gate 26B, Oslo, Norway. PullCore is created and operated by ESI Labs.
This Privacy Policy describes how we collect, use, store, and protect your information when you use PullCore.
Data Collection
Account & Authentication
- When you register, the Service does not ask you to provide traditional personal data such as name, email address, or phone number by default.
- Instead, a unique access key is generated for you. This key is used as your main authentication method to access your account.
- We may store internal identifiers (such as your account ID, generated keys, and related technical metadata) necessary to operate your account and provide the Service.
Network & Technical Data
- On our side, we do not deliberately store or profile users by IP address or precise geolocation.
- IP addresses and related connection data may be processed automatically by hosting, CDN, and protection providers for routing, security, and legal compliance, under their own privacy policies.
Payment & Billing Data
For cryptocurrency payments we may store:
- wallet address used for payment;
- transaction hash, amount, currency (e.g. BTC, USDT, TRX, XMR, etc.);
- date and time of payment;
- internal billing IDs and plan/subscription details.
Communication
If you contact us (e.g. via email), we process the information you provide (such as email address and message content) to answer you and manage support, abuse, or legal requests.
Data Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to outside parties except as described in this Privacy Policy. We may share information with service providers performing tasks on our behalf (e.g., payments, analytics, email delivery, hosting, customer support, marketing assistance).
How We Use Your Data
We use collected data to:
- Provide and operate the Service
- create and manage your account and access key;
- verify that you control the tested resources;
- process and verify payments.
- Improve and secure the Service
- analyze usage in aggregate;
- debug and optimize performance;
- prevent abuse, including attempts to use the Service for illegal activities.
- Communicate with you
- answer support requests;
- send important service and security notices;
- where legally allowed, send informational or technical updates.
Legal bases (where applicable, e.g. under GDPR) include performance of contract, legitimate interests (security, improvement), legal obligations, and your consent where required.
Third-Party Services
We do not sell or rent your data. We only share it in these cases:
- Service providers: hosting, CDN, security/DDoS protection, logging, analytics, and crypto payment infrastructure — strictly to operate and improve the Service and under confidentiality and security obligations.
- Legal & security: when required by law or to protect our rights, our users, or others, and to investigate misuse (including attacks using the Service).
- Business changes: if we are involved in a merger or similar transaction, data may be transferred under appropriate safeguards.
Data Retention
We keep data only as long as needed for the purposes above, including:
- account-related data - for as long as your account is active;
- payment data - for periods required by tax, accounting, and legal rules;
- logs and verification data - for a reasonable period to ensure security and prevent abuse;
- support correspondence - as long as necessary to maintain support history and legal compliance.
When you request deletion, we irreversibly delete or anonymize your data unless we are legally required to keep some of it longer.
Your Rights
Subject to applicable law, you may have the right to:
- Access your personal data and obtain a copy.
- Rectify inaccurate or incomplete data.
- Delete your account and related data ("right to be forgotten").
- Restrict certain processing activities.
- Object to processing based on our legitimate interests.
- Receive your data in a portable format (where applicable).
- Withdraw consent at any time where processing is based on consent.
To exercise your rights, contact us at admin@pull.su. We may ask you to verify your identity. You may also lodge a complaint with a data protection authority.