1. What We Collect
Lookups you perform. When you enter an IP address, domain or ASN into any of our tools, that query is sent to our backend to retrieve publicly available registration data. We do not store a history of your individual lookups linked to your identity.
Server logs. Like any web server, ours records a standard access log entry for each request: IP address, requested URL, HTTP status code, referrer and user-agent string. These logs serve operational and security purposes only. They are not shared with third parties for marketing, and they are rotated and deleted automatically after 30 days.
Contact form submissions. If you choose to contact us through the contact form, we receive your name, email address and the content of your message. We use this only to respond to you.
Blacklist reports. If you submit a report to our IP blacklist system, we record the reported IP address, the category of abuse, your IP address (for anti-spam purposes) and a timestamp. Reports are part of our threat intelligence database.
User accounts. You may optionally create a profile to post comments on IP lookup pages. If you do, we store your chosen username, email address and the content of your comments. You can request deletion of your account at any time.
What we do not collect. We do not collect payment information, or any sensitive personal data such as health information, racial or ethnic origin, political opinions or biometric data.
2. How We Use It
Server logs are used to monitor service health, detect abuse (for example, automated scraping that could degrade performance for other users), and diagnose technical problems. No log data is sold or rented.
Query data is used solely to return the requested result in real time. Results are cached on our server for performance for example, a lookup for the same IP address returns the cached result rather than hitting the upstream data source every time. The cached data reflects public registration records, not any information about you personally.
Contact form data is used to communicate with you. We do not subscribe you to any mailing list, and we do not pass your contact details to any third party unless required by law.
4. Third-Party Services
Cloudflare. Our site is served through Cloudflare, which acts as a reverse proxy and content delivery network. Cloudflare processes your IP address and request data to deliver pages, provide DDoS protection and cache static assets. See Cloudflare's Privacy Policy.
Google AdSense. We display advertisements through Google AdSense. Google may use cookies and web beacons to serve ads based on your prior visits to this or other websites. You can opt out of personalized advertising at Google Ads Settings. See Google's Privacy Policy for details on how ad data is collected and used.
Google reCAPTCHA. Our contact form uses Google reCAPTCHA v3 to reduce spam. Google receives information about your browser and behaviour on the contact page.
Content delivery. We load Font Awesome icons from a CDN hosted by Cloudflare (cdnjs.cloudflare.com) and Google Fonts for typography. These requests transmit your IP address to the respective CDN providers as part of standard HTTP delivery.
Data lookups. Our tools primarily query our own databases hosted on our servers. For certain supplementary data (reverse geocoding, weather on the location page), requests may be sent to external open-source APIs. The queried data (coordinates or IP address) is transmitted to these services. Their respective privacy policies govern how they handle that data.
Affiliate links. Some pages (such as our VPN comparison) contain affiliate links. If you click an affiliate link and make a purchase, we may receive a commission. The linked service's own privacy policy applies once you leave our site. We do not share any of your personal data with affiliate partners.
5. Data Retention
Server access logs: retained for 30 days, then deleted automatically.
Lookup cache: when you look up an IP, domain or ASN, the result (which contains only public registration data, not your personal information) may be cached on our server for up to 365 days for IP data and 30 days for domain data. This improves response times for repeated queries.
Recently viewed: the last 10 lookups performed across the site are displayed publicly on the homepage. These contain only the looked-up IP address and country code, not any information about who performed the lookup.
Blacklist reports: if you report an IP address to our blacklist system, the report (IP, category, your IP address and timestamp) is stored indefinitely as part of the threat intelligence database.
Contact form submissions: kept for as long as necessary to handle your enquiry, then deleted.
User accounts: if you create a profile, your username, email and comments are stored until you request deletion.
6. Your Rights
European Union residents (GDPR). If you are located in the EU or EEA, you have rights under the General Data Protection Regulation. These include the right to access personal data we hold about you, the right to have inaccurate data corrected, and the right to request deletion of data that is no longer necessary. Because we collect very little personal data and do not build user profiles, most of these rights have limited practical application to our service. If you have a specific request, contact us using the details below and we will respond within the timescales required by law.
The lawful basis for processing server log data is our legitimate interest in operating a secure and reliable service. Contact form data is processed on the basis of your consent (you choose to send it).
California residents (CCPA / CPRA). Under the California Consumer Privacy Act and its amendment, California residents have the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. If you wish to exercise any right, contact us at the address below.
Other US residents. Multiple US states (Virginia, Colorado, Connecticut and others) have enacted privacy laws with similar consumer rights. We apply the same principles to all users regardless of location: we collect the minimum data necessary, we do not sell it, and we will respond to reasonable access and deletion requests.
To exercise any of the above rights, email [email protected]. We may need to verify your identity before processing a request.
7. Security
All traffic between your browser and IPWhois.net is encrypted using TLS. Our servers are protected by firewalls and access controls. We keep software dependencies updated and review security practices regularly.
No internet transmission can be guaranteed to be completely secure. If you discover a security vulnerability in our service, please disclose it responsibly by emailing [email protected].
8. Children
This service is not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has submitted personal data through our site, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this policy from time to time. When we make changes we will update the date at the top of this page. If the changes are significant, we may place a notice on the home page. Continued use of the site after a policy update constitutes acceptance of the revised terms.
10. Contact
Questions or requests relating to this privacy policy can be sent to:
IPWhois.net
Email: [email protected]
Contact form: ipwhois.net/contact