Privacy policy
This policy explains what CheckMyIP processes when you use the site, for how long, and what you can ask of us. It is written to be read, not skimmed: five sections, no legal padding. Last updated 2026-10-21.
What we collect
Your IP address. It is part of every connection to any website; we need it to show it to you and to run the tests. We process it in memory to render the page and to look up its location, network and reputation. We do not write it to a database or a log file. Lookup results are cached for ten minutes — in memory on our lookup server and at our edge network (Cloudflare KV, keyed by the address) — so that repeated queries for the same address are fast; both caches expire on their own.
Addresses you enter. When you look up another address, that address is processed in the same way as your own and cached for the same ten minutes. We do not keep a history of what was looked up.
Leak-test sessions. The DNS, WebRTC and IPv6 tests create a short-lived session on our test server that holds your address, the resolver addresses that contacted our nameserver and the test results. Sessions are kept in memory only and expire ten minutes after they are created. WebRTC candidates are evaluated in your browser and are not sent to us.
Port checks. The port checker only tests the address the request comes from; the result is returned to you and not stored.
Usage statistics. We count page views, tool runs and errors in aggregate — by day, page, country, language, device class and referrer. These aggregates contain no addresses and cannot be traced back to a person.
Messages you send us. If you contact us, we keep your message and our reply for as long as the conversation needs it.
What we do not collect: account data (there are no accounts), payment data, precise location (we never ask the browser for it), browsing history on other sites, or anything from your device beyond what the browser sends to every website.
How long we keep it
Addresses and lookup results: up to ten minutes in the lookup server's memory cache and in the edge cache (Cloudflare KV), then gone. Leak-test sessions: ten minutes in memory, then gone; nothing is written to disk. Aggregated statistics: kept indefinitely because they contain no personal data. Contact messages: until the matter is resolved, then deleted within twelve months. Our hosting and network providers (Cloudflare, and the providers that run our servers) process connection data under their own policies; we have configured our services not to log request addresses, and we do not have access to logs that would identify you.
Cookies and analytics
The site works without cookies. We set one first-party cookie only to remember a choice you make: your preferred language, or that you dismissed the language suggestion (lang_pref, one year). It contains no identifier. Your light or dark theme is stored in the browser's local storage and never sent to us. Usage statistics are collected without cookies and without a persistent identifier. If we add a third-party analytics or advertising service in future, the cookie policy will name it, say what it sets and offer a choice before anything non-essential is set.
Your rights (GDPR/CCPA)
If you are in the EU/EEA, the UK, Switzerland, Brazil, California or another jurisdiction with a data-protection law, you have the right to access, correct and delete personal data we hold about you, to object to or restrict processing, to data portability and to complain to your supervisory authority. In practice we hold almost nothing: by the time we receive a request, any address we processed has already left our cache. Contact messages are the only data we can look up by name or email, and we will delete them on request. Our legal basis for processing your address to show you the page is our legitimate interest in operating a service you asked to use; for everything else, your consent or our contractual obligation to answer you. We do not sell personal data and do not share it with third parties for their own purposes. The data controller is StradaProxy LLC (a Delaware limited liability company, entity no. 10769341; registered agent: Entity Protect Registered Agent Services LLC, 1201 N Orange St, Suite 7665, Wilmington, DE 19801-1186, United States).
Contact
Privacy questions and requests: privacy@checkmyip.com or the contact page. We answer within thirty days, usually much faster.