CheckMyIP.tools

Privacy Policy

Last updated: 15 October 2026

This Privacy Policy explains what personal data CheckMyIP.tools ("we", "us", "the site") processes when you visit the site or use its tools, why we process it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR), the UK GDPR and other applicable data protection laws.

1. Who is responsible for your data

The controller responsible for processing your personal data on this site is:

Software Portal Co.,Ltd.
55/1 Soi Aree-Samphan 2, Phaholyothin Road, Bangkok 10400 Thailand.
Email: contact@checkmyip.tools

You can contact us at this address about anything in this policy or to exercise your rights.

2. Personal data we process

  • Your IP address. We read the IP address your browser connects from so we can show it to you. We look up its approximate location and network in a local database on our own server. It is not sent to any other IP lookup service.
  • Server logs. Like most websites, our web server keeps technical logs (IP address, date and time, page requested, referring page, browser type) to keep the service secure, prevent abuse and fix errors.
  • Browser and device details shown on the home page are read by your own browser and are not sent to or stored by us.
  • IP lookups you make with the lookup tool are processed to answer your request and are not stored beyond the server logs above.
  • Emails you send us. If you contact us, we process your email address and the content of your message to reply to you.

We do not ask you to create an account, we do not collect special categories of personal data, and we do not sell your personal data.

3. Network tools

  • Browser-only tools (user agent, screen resolution, browser fingerprint, subnet calculator, IP converter) run entirely in your browser. Nothing is sent to our server.
  • Tools that run on our server (ping, traceroute, DNS lookup, WHOIS, reverse DNS, blacklist check, port checker) receive the address or name you enter so they can answer. To do so, our server contacts the systems needed for the answer: the host you ping or trace, public DNS services (Cloudflare, Google or Quad9), official domain and IP registries, and spam blocklist operators. The port checker only ever tests your own IP address.
  • WebRTC leak test and VPN check: your browser contacts public STUN servers run by Cloudflare and Google to discover the IP addresses WebRTC would reveal. The result is compared in your browser and is not stored. The VPN check also compares your IP with the public list of Tor exit relays, which our server downloads from the Tor Project.

4. Cookies and advertising

We do not set our own tracking or analytics cookies. We use Google AdSense to show advertisements, which keeps this site free. Google and its partners may use cookies and similar technologies to show ads, measure them and, if you agree, personalise them based on your visits to this and other websites.

  • Visitors in the European Economic Area, the UK and Switzerland are shown a consent message (a Google-certified consent management platform) before any non-essential cookies are used or personalised ads are shown. If you decline, Google may still show non-personalised ads, which use cookies only for limited purposes such as frequency capping and fraud prevention.
  • You can change or withdraw your consent at any time using the privacy settings link shown by the consent message. Withdrawing consent does not affect processing that took place before.
  • You can also manage personalised advertising at Google Ads Settings and youronlinechoices.eu, or block cookies in your browser settings.
  • Learn more in How Google uses information from sites or apps that use its services and Google's Privacy Policy.

5. Legal bases for processing

Under Article 6(1) GDPR we rely on the following legal bases:

  • Legitimate interests (Art. 6(1)(f)): showing you your IP address, running the tools you request, keeping server logs, and protecting the site against abuse and attacks. Our interest is to provide a working and secure service. These activities have a limited impact on your privacy.
  • Consent (Art. 6(1)(a)): advertising cookies, similar technologies and personalised ads, where the law requires consent (including under the ePrivacy rules on storing or reading information on your device).
  • Legal obligation (Art. 6(1)(c)): where we must keep or disclose data to comply with the law.

6. Who we share data with

We only share personal data where it is needed for the purposes above:

  • Hosting provider: our server is run by a hosting company that processes data on our behalf under a data processing agreement.
  • Google: for advertising, as described in section 4. For personalised advertising Google acts as an independent controller.
  • Third-party network services: the DNS services, registries, blocklist operators and STUN servers listed in section 3 receive the queries needed to answer your request.
  • Authorities: if we are legally required to do so.

7. International transfers

Some of the providers above (such as Google and Cloudflare) may process data outside the EEA, including in the United States. Where this happens, transfers rely on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework for certified companies) or on Standard Contractual Clauses approved by the European Commission.

8. How long we keep data

  • Server logs: deleted automatically after 14 days, unless needed longer to investigate a specific security incident.
  • Lookups and tool requests: not stored beyond the server logs.
  • Emails: kept for as long as needed to deal with your request, and then deleted.
  • Advertising cookies: see Google's policies linked above, and your consent settings.

9. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you (Art. 15);
  • have inaccurate data corrected (Art. 16);
  • have your data erased (Art. 17);
  • restrict processing (Art. 18);
  • data portability (Art. 20);
  • object at any time to processing based on our legitimate interests (Art. 21);
  • withdraw your consent at any time, without affecting processing that took place before (Art. 7(3)).

To exercise these rights, email contact@checkmyip.tools. We will reply within one month. Because we keep only short-lived server logs and do not use accounts, we often hold no data that we can link to you. If we can, we may ask for information such as your IP address and the time of your visit to find it.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live, work or where the alleged infringement took place. A list of EU authorities is available from the European Data Protection Board. In the UK, this is the Information Commissioner's Office.

10. Automated decision-making

We do not make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects (Art. 22 GDPR).

11. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), rate limiting, restricted server access and short retention periods. No method of transmission over the internet is completely secure, but we work to protect your data.

12. Children

This site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time, for example when we add new tools or the law changes. The "last updated" date at the top shows when it last changed. Significant changes will be shown clearly on the site.

14. Contact

For any questions about this policy or your personal data, email contact@checkmyip.tools.