Privacy Policy

1. Who we are

IPGet operates the website at ipget.app, providing free IP, network and browser diagnostic tools. This policy explains what happens to information when you use the site.

2. Information processed when you visit

Your IP address

Any website you visit necessarily receives your IP address — without it, no response can be delivered to you. IPGet reads it from the connection, uses it to render the page you requested, and discards it. It is not written to a database, not retained for analytics, and not associated with any identifier.

Standard web server logs may record request metadata, including IP addresses, for a short period for security and abuse prevention. These logs are rotated and deleted automatically and are not used to build profiles of visitors.

Browser and device information

The browser, screen resolution and timezone pages read values directly from your browser using standard web APIs and display them to you. This information is never transmitted to our servers, never logged, and never stored. It exists only in your browser while the page is open.

Rate limiting

To prevent abuse of the JSON API, request counts are held in server memory against your address for a short window — by default one minute. These counters are transient, held only in memory, and are never written to disk or combined with anything else.

3. Cookies and local storage

IPGet sets no cookies of its own and uses no tracking pixels. The Google AdSense script described under Advertising below is a third party and may set its own cookies on the pages where it loads. Google Analytics, described under Analytics below, also sets its own cookies.

A small number of items may be written to your browser's local storage. Every one of them stays on your device, is never transmitted to us, is never attached to a request, and is removed when you clear your browser data.

• ipget-theme — your light or dark theme preference.
• ipget:recent-lookups — the last few IP addresses you looked up deliberately on the IP Lookup page, so you can return to one quickly. It holds at most six addresses and nothing else: no results, no locations, no host names. Your own address is not recorded — the automatic lookup on the home page never writes to it. A Clear button beside the list removes it immediately, and the feature is simply absent if your browser has local storage disabled.
• ipget:speed-history — the results of your last ten speed tests, written only when a test completes. Each entry holds four measurements and a timestamp: download, upload, latency and jitter. It records nothing about the connection they were measured on — no IP address, no provider, no location and no server name. A Clear history button removes it immediately.
• ipget:ip-history — the connection history on My IP History, written only when you press the button. It stores the date, country, network operator, autonomous system and connection type, plus a truncated one-way hash of your address in place of the address itself. The address is never stored and cannot be recovered from the hash.

None of these is a cookie, none is sent with any request, and none is used to identify or track you. Each is written only in response to something you did — running a test, pressing a button, choosing a theme — and never merely because you visited a page.

3a. Analytics

IPGet uses Google Analytics 4 to understand which tools people use and whether those tools work. It is configured to record product usage only.

What is recorded:

• Which tool or guide page was opened, by its name on this site.
• Whether a tool was run, and whether it produced a result or an error.
• Which related tool you moved on to, if any.
• For the speed test, a range rather than a figure — for example “25-100” Mbps. The measurements themselves are never sent.
• The language of the page you were reading.

What is never recorded: your IP address, your location, your network operator, and — this is the important one — anything you type into a tool. The domain you looked up, the address you checked and the URL you inspected are never sent, and the code enforces that with an allowlist rather than a convention: a parameter that is not explicitly permitted for an event is discarded before the event is sent.

Google Analytics sets its own cookies to distinguish one visit from another. Those cookies are Google's, are described in their documentation, and are removed when you clear your browser data. Blocking them, with a content blocker or your browser's settings, disables the analytics entirely and affects nothing else on this site.

4. Third-party services

IP geolocation

To show the country, region, city, provider and ASN associated with an address, the address is sent to a third-party geolocation provider. This request is made from our server, not from your browser, so the provider does not see your browser, your other requests, or anything that could identify you beyond the address itself. Results are cached briefly to reduce how often lookups happen at all.

Speed test

The internet speed test runs in your browser against Cloudflare's network using the @cloudflare/speedtest library. Test data is exchanged directly between your browser and Cloudflare and does not pass through our servers. We have explicitly disabled the library's result-reporting feature, so measurements are not sent to Cloudflare's telemetry endpoint either. Cloudflare's own privacy policy applies to the network connection itself. Results are shown to you and discarded when you leave the page.

Hosting

The site is served from our own infrastructure. No content delivery network, font service or script host is involved — fonts and all assets are served directly from ipget.app, so no third party observes your visit.

5. What we do not do

• We do not sell, rent or trade personal information.
• We do not build advertising or behavioural profiles ourselves.
• We do not require or offer accounts.
• Our analytics record anonymous product usage only — never your address, your location, or anything you type into a tool.
• We do not sell or share your data with advertisers ourselves.
• We do not store the results of any tool you run.

6. Advertising

IPGet shows Google AdSense advertising on some of its pages, and the Google advertising script is loaded only on those pages. Pages that carry no advertisement do not load it at all, so most of the site — this page included — makes no request to Google's advertising servers.

Advertising appears on the guides, on the technical reference page, and on the diagnostic tools that check something you have named, such as a domain or a certificate. It does not appear on the home page, the tools directory, the dashboard, the status page, the API documentation, the About page, this policy, the terms, the error page, or on the tools that simply report something about your own browser or connection. Where an advertisement does appear it sits below the result and below the explanation, never above them.

The loader is supplied by Google and served from pagead2.googlesyndication.com. Once it runs, Google may set cookies or use similar technologies, and may process your IP address, in accordance with Google's advertising policies. This processing is Google's, not ours: IPGet does not receive, store or have access to any advertising identifier, and still keeps no database of visitors.

You can review and change what Google collects for advertising at My Ad Center, and most browsers allow third-party cookies to be blocked entirely. Blocking them does not affect any IPGet tool — every feature works identically with advertising blocked.

If and when advertisement units are switched on, this section will be updated to say so, along with the "last updated" date above.

7. Data retention

Because the tools store nothing, there is nothing to retain. Server logs are kept only as long as needed for security and operational diagnostics, then rotated and deleted. In-memory rate-limit counters expire within minutes and do not survive a restart.

8. Your rights

Under the GDPR, the CCPA and comparable laws you have rights to access, correct, delete and port your personal data, and to object to its processing. Because IPGet holds no stored personal data and operates no accounts, there is in practice no record to retrieve or erase. If you believe we hold information about you, contact us and we will investigate.

9. Children

IPGet is a general-purpose technical utility and is not directed at children. We do not knowingly collect information from anyone, including children.

10. Security

The site is served over HTTPS with a strict Content Security Policy and modern security headers. Features that make outbound network requests validate their input and refuse private and reserved address ranges.

11. Changes to this policy

If this policy changes materially, the date above will be updated. Continued use of the site after a change indicates acceptance of the revised policy.

12. Contact

For any privacy question, contact us at privacy@ipget.app.