Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
AiSpeed is a website and Shopify store speed optimisation app that uses the Lighthouse and PageSpeed APIs to measure Core Web Vitals and automatically improve performance, with very little visitor tracking.
AiSpeed is a website and Shopify store performance optimisation app. It connects to the Google Lighthouse and PageSpeed APIs to measure Core Web Vitals such as First Contentful Paint, Largest Contentful Paint, Total Blocking Time and Cumulative Layout Shift, then applies automated improvements like image compression and faster rendering. A merchant dashboard reports on these metrics so store owners can track the impact over time.
The core of AiSpeed is technical: it analyses pages, asset sizes and timing metrics rather than building profiles of individual shoppers. Most processing concerns the store configuration and aggregated performance scores. It sets very few cookies, mainly strictly necessary ones for the app interface, and it does not behave like an advertising or cross site tracking tool. Any real user monitoring that captures load times from real visitors should be checked to confirm whether IP addresses or device data are involved.
Because AiSpeed mostly handles technical and aggregated data, the privacy footprint is small. Under the ePrivacy Directive, strictly necessary cookies do not need consent, and AiSpeed generally falls into that category. Personal data only enters the picture if real visitor measurements include identifiers such as IP addresses, in which case the GDPR applies and the lawful basis is usually the legitimate interest of keeping the site fast and usable.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
For purely technical performance optimisation, prior consent is generally not required, although you should still describe the app in your privacy notice. As a cloud SaaS, AiSpeed may process data on US based infrastructure, so EEA controllers should confirm whether the vendor relies on the EU US Data Privacy Framework or standard contractual clauses and capture this in a data processing agreement.
Sign a data processing agreement, confirm the hosting region and the transfer mechanism, and add a short line to your privacy notice describing AiSpeed as a performance tool. Verify whether any real user monitoring collects identifiers, and if so configure IP anonymisation or shorten retention. Because the cookie usage is minimal, AiSpeed is one of the simpler third party tools to keep compliant.
Websites using AiSpeed must obtain user consent under GDPR regulations.
DPIA considerations
AiSpeed is generally low risk because it focuses on technical performance metrics rather than profiling individual visitors. A full DPIA is usually not required, but a short screening is sensible. Confirm what visitor level data, if any, is collected during real user monitoring, whether IP addresses are stored, where processing occurs, and that a data processing agreement and appropriate transfer mechanism are in place with the vendor.
Sample consent text
We use AiSpeed to measure and improve the loading speed of this site. AiSpeed mainly processes technical performance data and does not set advertising cookies. Where any non essential storage is used on your device, it will only run after you accept it in our cookie settings.
Third-party domains contacted
aispeed.ioapp.aispeed.iogoogleapis.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| aispeed_session | Necessary | Session | Maintains the merchant dashboard session while the store owner uses the AiSpeed app. |
| aispeed_prefs | Functional | 6 months | Stores app interface preferences such as the selected dashboard view. |
AiSpeed collects user analytics data — you legally need a consent banner. Try FlowConsent free.
AiSpeed sets very few cookies, mainly a strictly necessary session cookie for the merchant dashboard and a functional preferences cookie. It does not use advertising or cross site tracking cookies, so its cookie footprint on store visitors is minimal.
For the strictly necessary and functional app cookies, prior consent is generally not required. Consent only becomes relevant if you enable a feature that stores non essential data on the visitor device, which is not the default behaviour for a performance tool.
The usual basis is legitimate interest, since measuring and improving site speed serves both the merchant and the visitor experience. If real user monitoring captures identifiers such as IP addresses, document that legitimate interest assessment and apply data minimisation.
Possibly. As a cloud SaaS, AiSpeed may process configuration and performance data on US based infrastructure. EEA controllers should confirm whether the vendor relies on the EU US Data Privacy Framework or standard contractual clauses in the data processing agreement.
A full DPIA is usually not needed because AiSpeed handles technical performance data rather than profiling. A short screening is still sensible to confirm whether any visitor identifiers are collected and where the data is processed.
Sign a data processing agreement, confirm the hosting region and transfer mechanism, and mention AiSpeed in your privacy notice as a performance tool. If real user monitoring is enabled, configure IP anonymisation and short retention to keep the processing proportionate.
Other low impact performance tools include built in Core Web Vitals reporting, self hosted Lighthouse runs, or privacy first monitoring such as SpeedCurve and Calibre. These keep optimisation focused on technical metrics rather than visitor profiling.
List the necessary and functional AiSpeed cookies with their purpose and duration, and note that AiSpeed is a performance tool that does not set advertising cookies. Mention any US processing and keep the entry aligned with your overall cookie banner.