Privacy Policy

What Is My IP, VPN Check, and WebRTC Leak Test

These three tools call the same internal endpoint to read your public IP address from your HTTP request headers. Your IP is then sent to a network intelligence provider (see “Third-party services” below) to retrieve your approximate city, region, country, ISP name, ASN, and VPN/proxy/Tor signals. This is the minimum data needed to return those results. Nothing is stored by this site after your request completes.

Browser fingerprint data (What Is My IP)

Your browser name, operating system, language, timezone, screen resolution, color depth, and hardware thread count are read locally by JavaScript and displayed on screen. This data is not transmitted to this site's servers.

WebRTC ICE candidates (WebRTC Leak Test and VPN Check)

These tools initiate a WebRTC peer connection to Google's STUN servers to gather ICE candidates from your browser. Your browser connects directly to stun.l.google.com:19302 and stun1.l.google.com:19302. Any local network IPs or additional public IPs exposed through WebRTC are displayed to you only and not stored.

DNS Leak Test

This tool uses an external service (bash.ws) to detect which DNS servers are resolving your requests. When you run the test, your browser first fetches a unique session ID from bash.ws, then makes 10 unique DNS probe requests to their infrastructure. Finally, the results - your public IP and the DNS resolver IPs observed - are fetched from bash.ws's API and displayed to you. See “Third-party services” below for details.

User Agent Analyzer

This tool reads the following signals entirely within your browser using standard JavaScript APIs: your User Agent string, operating system, browser name and version, screen resolution, color depth, CPU thread count, system timezone, preferred language, cookie enablement status, and Do Not Track preference. None of this data is transmitted to our servers. It is read locally and displayed on screen only. No request is made to any external service.

HTTP Headers Checker

When you enter a URL into this tool, your browser sends a request to our server-side API at /api/headers. Our server then makes a single HEAD request to the URL you provided and returns the HTTP response headers to your browser. The URL you entered and the headers returned are not stored, logged, or retained after the response is sent. This tool does not process any personal data about you — it fetches metadata about the third-party website you choose to inspect. Private and internal IP addresses (such as localhost or 192.168.x.x) are blocked and cannot be queried.

Client-Side Development & Security Tools (e.g., Password Generator, Hash Generator, JSON Formatter, Text Case Converter)

These utilities run entirely locally in your browser using JavaScript and standard Web APIs. When you generate a password, format JSON code, or compute a hash, the computation happens on your local device. No input data or generated results are transmitted to our servers or any third-party service.

Google Analytics (GA4) - consent-gated

This site uses Google Analytics 4 (tracking ID G-RJX7WMERC5) to understand aggregate traffic patterns. GA4 only loads if you have clicked “Accept” on the cookie consent banner. If you click “Decline” or take no action, the GA4 script is never injected and no analytics data is collected. When loaded after consent, Google Analytics collects page views, approximate location inferred from your IP, browser and device type, and session behavior. Google's data practices are governed by their Privacy Policy.

Google AdSense

This site integrates Google AdSense (publisher ID ca-pub-3918862480266328). The AdSense script loads on every page visit to facilitate site verification and advertising capabilities regardless of cookie consent choice. When active, Google AdSense uses cookies and similar technologies to serve ads based on your prior visits to this and other websites. Google's advertising practices are governed by their Privacy Policy. You may opt out of personalized advertising at Google Ads Settings.

ipapi.is (IP intelligence)

The IP lookup tools send your public IP address to api.ipapi.is to retrieve your approximate location, ISP, ASN, and VPN/proxy/Tor signals. This enrichment happens server-side - your IP is sent from our server to ipapi.is, not directly from your browser. What ipapi.is retains from these requests is governed by their own privacy policy at ipapi.is.

bash.ws (DNS Leak Test)

The DNS Leak Test makes browser-initiated requests directly to bash.ws's infrastructure. This includes fetching a unique session ID, making 10 DNS probe requests, and retrieving test results from their API. Your public IP address and the DNS resolver IPs that handled your requests are processed by bash.ws. Their data practices are governed by bash.ws's own policy.

Google STUN servers

WebRTC testing connects your browser to stun.l.google.com:19302 and stun1.l.google.com:19302 to gather ICE candidates. Google sees these connections. This is governed by Google's Privacy Policy.

Vercel (hosting)

This site is hosted on Vercel. Vercel may process visitor IP addresses and request metadata as part of routing and security. See Vercel's Privacy Policy.

Google Fonts (self-hosted)

This site uses Inter, Outfit, and JetBrains Mono typefaces. These fonts are downloaded and self-hosted at build time using Next.js's built-in font system. No requests are made to Google's font servers at runtime - your browser loads the font files directly from our Vercel hosting.