Privacy Policy

• Log and usage data: IP address, the user agent string your browser sends with every request, which names your browser and operating system, referring URL, and request timestamps.

• Device data: general information about the computer, phone, or tablet you are using.

• Approximate location: an imprecise location derived from your IP address, used to show localized network details.

• IP Lookup, Proxy Check, and VPN Check pass the address you type to two services. The network behind it — provider, organization, and AS number — is answered by Cloudflare Radar, queried through my own Cloudflare account. The finer location detail — city, region, postcode, timezone, and coordinates — is answered by ipwho.is. Both are asked at the same moment, and neither is told anything about you beyond the address itself.

• The IP Lookup map loads map tiles from OpenStreetMap (tile.openstreetmap.org). To draw the map, your browser asks for the tiles around the approximate coordinates of the address you looked up, so OpenStreetMap sees your IP address and that map area.

• Your own IP address on the home page and IP Check is read from Cloudflare's own data about your request, by a Cloudflare Worker I run myself, and that answer is never cached. A browser on a dual-stack connection can reach the Worker over IPv6, so the home page also asks ipv4.icanhazip.com, a plain-text echo service that Cloudflare operates, for your IPv4 address on every visit; IP Check does the same only when the Worker returned no IPv4 address. If the details that come back are missing the provider, city, country or coordinates, your address is also sent to ipwho.is to fill the gaps.

• DNS Lookup sends live queries to public DNS resolvers and authoritative name servers.

• Robots.txt Analyzer fetches the robots.txt file from the website you name. Most sites do not let a page on another domain read their files, so when that direct read is refused the request is retried once through AllOrigins, a free public relay at api.allorigins.win, which then sees the address you asked about. A file you paste into the tool yourself is read in your browser and is not sent anywhere.

• Ping Tool sends its timing requests from your browser straight to the host you typed, so that host sees your IP address as it would on any ordinary visit, and it asks Google's public DNS resolver at dns.google for that host's address, so the name you typed is seen by Google as well.

• Internet Speed Test transfers real data between your browser and a test server to measure the connection. That server is normally my own Cloudflare Worker at speed.myipshow.com; when it cannot be reached the page falls back to Cloudflare's own public speed test endpoint at speed.cloudflare.com, which then sees your IP address and the transfer itself. The network name shown beside your result is read from my own endpoint at ip.myipshow.com, and no result is stored on a server.

• The IP report card (home page) is drawn entirely in your browser, and the image or PDF you save is never sent to me. Nothing is requested when the page loads; three parts make outside requests only when you save, download, or share a card. A WebRTC leak check asks Cloudflare's public STUN server (stun.cloudflare.com, port 3478) which public IP address it sees for your browser and compares it with the address shown on the page, so Cloudflare sees your IP address as it does for any other request. This check runs in your browser, and its result is not sent to me or stored. If your browser blocks WebRTC, the card says the test was not run. The card's QR code is fetched from api.qrserver.com and encodes only this website's address, so that service sees your IP address and browser headers but nothing about your result. If you make the card in Bengali, its font is loaded from Google Fonts (fonts.googleapis.com), which also receives your IP address and browser headers.

• User Agent Check is the exception. It reads the user agent string your own browser reports and makes no external request at all.

• To run the tools and return the result you asked for.

• To answer questions and support requests you send me.

• To show advertising through Google AdSense and its partners, who may use cookies to choose which ads you see.

• To keep the site working, prevent abuse, and meet legal obligations.

• Performance of a service you requested — sending the address or domain you typed to the source that can answer it. Without this, the tool cannot return a result.

• Legitimate interests — keeping the site available, secure, and free of abuse, and understanding in aggregate which tools are used.

• Consent — non-essential cookies, including analytics and advertising cookies, are only set after you accept the cookie notice. You can withdraw consent at any time through the Cookie Settings button in the footer or your browser's cookie settings.

• Legal obligation — where I am required to retain or disclose information by law.

• Google. This site is hosted on Blogger, uses Google Analytics, and serves advertising through Google AdSense, so Google processes hosting logs, analytics data, and advertising data. Google's own handling of that data is governed by the Google Privacy Policy.

• Cloudflare. The domain is served through Cloudflare, so every request to this site passes through their network, and the tools that look up an IP address run on a Cloudflare Worker I operate. Cloudflare therefore receives request data such as your IP address and browser headers, and receives any address you type into an IP tool as part of answering it. The report card's WebRTC leak check also contacts Cloudflare's public STUN server at stun.cloudflare.com. Their handling of that data is governed by the Cloudflare Privacy Policy.

• Font, map, and QR providers. The site's fonts are served from jsDelivr (cdn.jsdelivr.net), the IP Lookup map loads tiles from OpenStreetMap, and the home page's report card uses api.qrserver.com for its QR code and, when made in Bengali, Google Fonts (fonts.googleapis.com) for its font, so each of them receives your IP address and browser headers when those files load. Their handling of that data is governed by their own policies.

• FormSubmit. The form on the Contact page and the short message form in the site footer are both delivered by FormSubmit, which receives what you submit in order to pass it to me. The Contact form sends your name, email address, and message; the footer form sends only the message text. Their handling of that data is governed by their own terms.

• The data sources behind each tool. As listed above, the address or domain you enter is passed to the service needed to produce your result — Cloudflare Radar and ipwho.is for IP lookups and for the network details of your own connection, a public DNS resolver for DNS records, the website itself for a robots.txt file, the AllOrigins relay when that website refuses to be read directly by a browser, or Cloudflare's public speed test endpoint when my own test server cannot be reached.

• Legal compliance. If I am required to disclose information by law, a court order, or a valid government request.

• Analytics cookies. Google Analytics uses cookies (named _ga and _gid) to measure which pages and tools are used and how they perform. These are only set after you accept the cookie notice. You can also opt out of Google Analytics across all sites using the Google Analytics Opt-out Browser Add-on.

• Advertising cookies (Google AdSense). Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet. Google uses cookies such as IDE and NID for this purpose. Advertising cookies are only set after you accept the cookie notice. You may opt out of personalized advertising by visiting Google Ads Settings, or opt out of third-party vendor cookies for personalized advertising at aboutads.info and optout.networkadvertising.org.

• Consent (everywhere). A cookie notice appears on your first visit, and analytics and advertising cookies are only set after you accept it. Nothing non-essential is stored until you accept, and you can change or withdraw your choice at any time using the Cookie Settings button in the footer, or by clearing cookies for this site in your browser.

• Opting out. You can turn off personalized advertising in Google My Ad Center, opt out of third-party vendor cookies at aboutads.info, and block or delete cookies in your browser settings at any time.

• Your theme choice. Your light or dark mode preference is saved in your browser's local storage. It never leaves your device and is not sent to me.

• Recent lookups. Some tool pages keep a short list of your last few lookups so you can repeat one. That list is stored in your own browser's local storage, is never sent to me, and clearing your browser data removes it.

• Your lookups. Not stored. I do not run a database of the addresses or domains entered into the tools. The result for an address you type is held in Cloudflare's edge cache for up to six hours (thirty minutes when no city was found) so that repeating the same lookup is instant; that stored copy is the answer about the address and contains nothing about who asked for it. Your own connection's details are never cached.

• Recent checks in your browser. Held in your own browser's local storage as described above, and removable at any time.

• Emails and contact-form messages. Kept only as long as needed to deal with your message.

• Analytics and hosting logs. Held by Google, not by me, and retained according to Google's own retention settings for Analytics and Blogger.

• Access the personal information I hold about you, or request a copy of it.

• Request that it be corrected or deleted.

• Object to or restrict certain processing, and withdraw cookie consent at any time.

• Opt out of the sale or sharing of personal information (California residents). MyIPShow does not sell or share personal information as those terms are defined under the CCPA/CPRA, and has not done so in the previous twelve months. There is therefore no "Do Not Sell My Personal Information" link to click, because there is nothing to opt out of. If that ever changes, this page will be updated first.

• Complain to your local data protection authority.