Privacy
The home page displays the exit IP, country and ASN received by this site and reads only this device’s language and timezone; it contacts no third party. The browser privacy check page starts bounded checks automatically when it opens: WebRTC uses Cloudflare STUN, address family uses ipify and public DoH uses Google and Cloudflare, so those services see your exit IP. Each request is limited to 2.5 seconds, the whole page to 15 seconds, and each destination to two attempts. Results on that page are displayed in your browser only: they are not written to the diagnostic record and no test history is kept. The website connectivity page automatically contacts the 44 sites it lists from your browser when it opens (10 small requests each, up to 3.6 seconds per request) and reads the country code from ChatGPT's and Claude's public diagnostic pages; those sites see your exit IP. Additional game-platform and adult-site categories run only when you start each one, sending five small requests per site. They do not affect the automatic score; expanding the adult category alone sends no requests. Those sites see your exit IP. Clicking a site card opens the corresponding website in a new tab. Your browser may send that site its existing cookies, but does not send this site as the referrer. Sites you add are stored only in this browser. Results on that page are computed and displayed in your browser only and are not written to the diagnostic record. When the IP address page opens, this site's server automatically sends your current IP address to the public RDAP service of the responsible Regional Internet Registry to read the registration of its network and AS, so that registry sees your IP; when you look up another IP, the server sends that address instead. Registry lookups are rate-limited, and the page still shows this connection's facts if one fails. Registration data is subject to the source registry's terms; ARIN data is for network operations or technical research only, not commercial services, advertising, marketing, resale or republication. Only public network and AS registration facts and their retrieval time are cached (fresh for 7 days, deleted after 90 days); the address you looked up, lookup history and contacts published as named persons are not stored. Checks you start yourself (quick latency scan, WebRTC, IPv4/IPv6, public DNS) record time, type, method version, targets, results, language and the server-observed exit IP, country and ASN. Full-scan results and browser-environment details are shown locally and never sent to the diagnostic record endpoint. Saved records expire after 30 days and are cleaned hourly; provider recovery backups may persist within their recovery window. Only authorized maintainers can inspect records using controlled database accounts; no public record-reading API exists. We do not collect raw device fingerprints, precise location or browsing history, and we never request camera, microphone, location or notification permission. Legacy IP lookup, sharing and administration remain covered by the previous policy.
On your first home visit, this site selects a language from your browser settings. A manual choice is remembered in a first-party cookie for one year.
New browser, rendering and temporary storage details remain on this device. Only one explicitly saved comparison snapshot stays in this browser and can be deleted. Default export redacts IP and high-entropy values.
This site records source domains, entry pages and coarse tool-use events for 30 days. A random tab session rotates after 30 minutes of inactivity. Queried IPs, configuration, credentials and fingerprint readings are excluded. Missing sources stay unknown. DNT/GPC are respected; set localStorage ip00.analytics.optout to 1 to opt out.
Read the legacy privacy policyNetwork diagnosis
Diagnostic pages now run bounded checks on entry. The initial cloud scan uses at most 20 targets; automatic initial results are not saved in diagnostic history. Combined diagnosis contacts registered regional nodes directly, revealing the exit IP to them. DNS tests use random names and correlate resolver exits in authoritative-node memory for at most two minutes. Static configuration checks remain in your browser. Only after you authorize it are selected proxy credentials sent over HTTPS to a measurement node and discarded after testing, never written to a database. Download tests require separate opt-in, bounded to 8 MiB and 15 seconds per node.