Privacy

Your address is never written to storage in readable form. Before anything is saved it is combined with a server-side secret and hashed with SHA-256, and only that hash is kept. The hash lets us apply rate limits and recognise a pattern of abuse across requests; it cannot be reversed into an address.

Your address is shown back to you on the dashboard and in the What Is My IP tool. That is displayed to you in the moment and is not retained.

When you run a tool we record which tool it was, the target you entered, whether it succeeded and how long it took. If you are signed in, that row is attached to your account so your dashboard can show your own history. If you are not signed in, it is not attached to any identity.

History is deleted after 7 days. Query history is only ever returned to the account that created it — signed-out visitors cannot see anyone's queries, and no user can see another user's.

Bear in mind the targets you enter are sent to the systems being queried — that is what the tools do. A DNS lookup is visible to the resolver, a certificate check to the host being checked.

There are two, and neither is used for advertising or analytics.

• nm_vid — a random identifier with no meaning outside this site. It lets the visitor counter avoid counting you repeatedly and lets probe-tool rate limits apply per visitor rather than to everyone at once. It holds no information about you.
• A session cookie, set only if you sign in, so you stay signed in. Clearing it signs you out.

The tools work by querying real infrastructure — DNS resolvers, WHOIS and RDAP servers, certificate endpoints, routing and reputation data sources. Running a tool means contacting those systems on your behalf, from this deployment's own connection rather than from your machine.

Separately, when this deployment sits behind a proxy that hides your real address, your browser asks api.ipify.org for your own public address so it can be displayed to you. That request comes from your browser and reaches only that service; its response is enriched here, not there.

Signing in stores your email address and display name. There is no password to store. You can clear your query history at any time from your workspace.

This site currently shows no advertising and includes no advertising or analytics scripts.

Use these tools only against infrastructure you own or are authorised to test. Probes leave this deployment's network connection, so misuse is attributable to it; abusive traffic is rate-limited and logged.