Privacy policy

We collect as little as possible: information needed for a check is only used while handling the request, and we don't build user profiles.

What our server sees

Like any website, your requests include your IP address, User-Agent and other headers. We use them to run checks and return results, and don't write them to a database. To avoid repeated lookups, IP information is cached at Cloudflare for up to 7 days, keyed only by IP and not linked to anything else.

Browser-side checks

Time zone, language, WebRTC and fingerprint checks run in your browser. Only IPs that need a location lookup (such as WebRTC or DNS resolver IPs) are sent to our API, and the results aren't stored.

Third-party services

The DNS leak test makes your browser contact Fastly, Surfshark, IPLeak, BrowserLeaks and bash.ws; the WebRTC test connects to STUN servers from Google, Cloudflare, BlackBerry and Twilio; the exit check contacts IPIP.net, ipify and Cloudflare; maps come from OpenStreetMap or Google Maps. These services see your IP and follow their own privacy policies.

Port checks

The open port check only connects to the IP making the request; you can't target another address.

Phone number lookup

Only the first 7 digits are used to look up the prefix; full numbers aren't stored.

Cookies, analytics and advertising

We use a cookie named lang to remember the language you chose after switching manually. It lasts one year. Without it, we pick the language from your browser settings.

We use Google Analytics to measure traffic and page usage so we can improve the site. It sets cookies such as _ga and collects the page address, referrer, device and approximate region, which Google processes under its privacy policy. The IP details in your check results are not sent to Google Analytics. You can opt out with your browser's blocking features or the Google Analytics opt-out add-on. There is no advertising on the site today; if we add any, we'll list the advertisers and your choices here.