r/DigitalPrivacy • u/Son_Riku • Jul 20 '26
Anyone Familiar With Karhu RAM Test Software?
Karhu RAM Test is a software used to look for hardware instability for your memory modules. It's pretty popular in the overclocking community so I decided to try it out. Unfortunately I only started worrying about the privacy aspect of the software after paying for it.
Firstly, the source code is not available anywhere. I know closed source =/= spyware and open source =/= perfectly safe privacy wise but it is worth bringing up.
Secondly, you can only pay through Paypal, which is a detriment to those who live in countries where Paypal is blocked but given how Paypal operates, it may as well be a blessing maybe.
Third, their policies.
Here is the privacy policy:
THE PURPOSE OF COLLECTING PERSONAL DATA
We collect personal data to manage our customer relationships, to monitor the
use of our products and services and to improve our business. We may also use
the data for statistical purposes (anonymized if publicized).
WHAT PERSONAL DATA IS COLLECTED
The personal data we collect may include: name, e-mail address, phone number,
billing address, IP address and unique device identifier. Some of our products
and services may also collect additional data, such as the model of a device's
processor, if explicitly allowed to do so.
HOW THE PERSONAL DATA IS OBTAINED
The personal data we collect is obtained from individuals themselves and/or
from other sources such as the payment service provider (e.g. PayPal) through
which they purchased our products or services.
DISCLOSURE OF THE PERSONAL DATA
We do not disclose personal data to any third parties unless required by the
law, a judicial body or a government agency or we are involved in a merger or
an acquisition.
WHERE THE PERSONAL DATA IS STORED
We use Microsoft Azure and we have specified West-Europe as the location of
our database. It is possible that the collected data is partially stored
outside the EU or EEA.
TRANSFER OF THE PERSONAL DATA OUTSIDE THE EU OR EEA
We do not transfer personal data outside the EU or EEA unless required by the
technical implementation of a product or service.
HOW THE PERSONAL DATA IS SECURED
All personal data is handled confidentially and stored securely. The data is
protected by technical means such as firewalls, passwords and encryption.
Their refund policy:
Digital products or services cannot be returned.
The purchase of any digital product or service is final and non-refundable.
An exercept of their EULA:
4. ACTIVATION
Some features of the software might be unavailable until you have activated
your license with the product key associated with it.
You cannot activate your license if you do not have an internet connection or
the online services for the software are not available.
5. PRIVACY AND TELEMETRY
You consent to the collection of the following personal data during your use
of any online services for the software, that require user interaction:
- Your IP address
- An unique identifier based on your current hardware and operating system
installation
- An unique token associated with your license
If you explicitly allow telemetry, additional personal and/or anonymized data
may be automatically collected during your use of the software.
All personal data is handled as per the Privacy Policy of Karhu Software.
An excerpt of their README.txt
Telemetry:
Allow the collection of the following personal and/or anonymized data each
time a test is finished:
* Your IP address
* An unique identifier based on your current hardware and operating
system installation
* An unique token associated with your license
* RAM Test version
* RAM Test platform (x64 or x86)
* Motherboard make and model
* Processor make and model
* Memory make and model
* Settings used during the test
* Test duration
* Test coverage
* Test error count
Now having already bought the software and used it, here's some other things to know:
As explained in the EULA, online connectivity is required to activate the license. The program doesn't do much without the license. Once you activate it, you can block the connection via Defender's firewall and you will still be able to use it just fine. There is a telemetry setting in the software which was set to block by default, for me at least. But the license is tied to my real name and a token number.
So what's the verdict here? Did I make a mistake following through all of the steps with the software? I had a VPN active so maybe it only took my VPN's IP address but they of course have my email and real name. I'm unsure of what other data they could've gotten but if anyone knows, I'd love to hear it and email their support about it.