Last updated: October 6, 2026

At WhatIsMy-IPAddress.com ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website.

Information We Collect

Our service displays your public IP address, network information, and security analysis. Here's what you should know:

• IP Address: Your IPv4 and IPv6 addresses are retrieved and displayed to you, but we do not store or log them on our servers.
• Geolocation Data: Location information (city, region, country, timezone, coordinates) is fetched from third-party APIs and displayed to you. We do not store this data.
• Network Information: Hostname (reverse DNS), ASN, and connection type are fetched and displayed. We do not store this data.
• Security Analysis: We check for VPN/Proxy usage, Tor exit nodes, DNS leaks, IPv6 leaks, WebRTC leaks, and browser fingerprinting. All checks are performed in real-time and no data is stored.
• Browser Information: Technical details like browser type, operating system, platform, screen resolution, language, cookies status, and JavaScript status are detected locally in your browser for the Technical tab. This data never leaves your device, except as anonymized counts described under "Anonymous Fingerprint Statistics" below.
• Hardware Information: We detect CPU cores, device memory, pixel ratio, GPU renderer, and WebGL parameters locally in your browser. This data is used for display purposes and fingerprinting analysis, and never leaves your device, except as anonymized counts described under "Anonymous Fingerprint Statistics" below.
• Browser Fingerprint: We generate a browser fingerprint hash by combining multiple browser properties (screen resolution, color depth, timezone offset, platform, language, cookies, storage APIs, fonts, GPU renderer, media codecs, CPU cores, device memory, pixel ratio, and WebGL parameters). This hash is calculated entirely in your browser and is used to demonstrate how websites can identify you. The fingerprint is displayed with a uniqueness score ("Common," "Moderate tracking risk," or "High tracking risk"). The hash itself never leaves your device and is not stored — see "Anonymous Fingerprint Statistics" below for the one exception, where individual signal values (not the hash) are sent to our own server in anonymized form.
• Anonymous Fingerprint Statistics: To make the uniqueness score above more accurate over time, our server keeps an anonymous running count of how common each individual fingerprint value is (for example, how many visits report a given screen resolution or GPU renderer string). We store only a (signal, value) pair and a count — never your fingerprint hash, never your IP address, and never any identifier that could link the values from one visit back to a specific visitor or tie them together across visits. This data cannot be used to re-identify you and is not shared with any third party. To prevent automated abuse of this feature, our server briefly rate-limits requests using a one-way hash (MD5) of your IP address, the same approach described under "Port Scanner" below — this hash is never linked to the signal data above.
• Font Detection: We test for the presence of 20 common fonts in your browser using canvas text measurement. This is performed locally and no data leaves your device, except as an anonymized count described under "Anonymous Fingerprint Statistics" above.
• Media Codecs: We check support for 19 video and audio codecs using the MediaSource API. This is performed locally and no data leaves your device, except as an anonymized count described under "Anonymous Fingerprint Statistics" above.
• Storage APIs: We check availability of sessionStorage, localStorage, indexedDB, and openDatabase. This is performed locally and no data leaves your device, except as an anonymized count described under "Anonymous Fingerprint Statistics" above.
• Theme Preference: We store your light/dark mode preference in your browser's local storage. This data never leaves your device.
• Port Scanner: When you run a port scan, your public IP address is temporarily used by our server to perform the scan. The IP address is not stored — a rate-limiting file containing a one-way hash (MD5) of the IP is kept for 60 seconds to prevent abuse, after which it is no longer used. No scan results are stored on our servers.
• Password Breach Check: When you check a password, it is hashed locally in your browser using SHA-1. Only the first 5 characters of that hash are sent to the Have I Been Pwned API (k-anonymity model). Your actual password is never transmitted and never leaves your device.
• Email Breach Check: When you check an email address, it is sent to third-party breach detection APIs (Have I Been Pwned, LeakCheck.io, EmailRep.io) to check whether it appeared in known data breaches. We do not store the email address on our servers.
• WHOIS Lookup: When you look up an IP address, the IP is sent to the regional internet registries' public RDAP service (via rdap.org), to third-party network data providers (ipapi.is, and proxycheck.io through our server), and to an abuse reputation API (AbuseIPDB) to retrieve ownership, ASN, and threat information. If you enter a domain or URL instead, the hostname is first resolved to an IP address via a DNS-over-HTTPS query to Cloudflare, and that IP is then looked up the same way. We do not store the IP addresses or domains you search.
• VPN, Proxy & Tor Detection: To check whether you are connected through a VPN, proxy, or Tor, our server sends your public IP address to proxycheck.io. The result (for example, "VPN" and the network operator) is cached on our server for up to 6 hours under a one-way hash (MD5) of the IP address — the IP address itself is not stored — so that repeat visits don't trigger new lookups. A separate rate-limiting file, also keyed by an MD5 hash of your IP, is kept for 10 minutes to prevent abuse.
• DNS Leak Test: Your browser looks up several random, one-time test domain names at bash.ws. This reveals to bash.ws the IP addresses of the DNS resolvers your browser uses, and your public IP address. The test IDs are random and not linked to you in any way.
• Ad Tracker Blocking Test: When you run this test, your browser sends network requests directly to around 36 third-party ad-tech and analytics domains (including Meta, Google, TikTok, Amazon, and Microsoft) to check whether each one is blocked. Only placeholder identifiers are used — no personal data is deliberately sent — but as with any direct network request, your IP address is visible to each of those third parties, the same way it would be on any site that embeds their tracking pixels. We do not store or log your results, and nothing about this test is transmitted to our servers.

Third-Party Services

We use the following third-party services to provide our functionality:

Affiliate Links

Some pages on this website (such as our VPN comparison and VPN protection guides) contain affiliate and sponsored links to third-party products and services. If you click one of these links and make a purchase, we may receive a commission at no additional cost to you. These links are clearly marked with an Affiliate Disclosure notice on the relevant pages.

When you click an affiliate button, the click event is recorded anonymously via Google Analytics (see below) to help us understand which links are used. No personal data beyond what Google Analytics normally collects is transmitted.

Cookies and Tracking

We use the following cookies:

• Google Analytics: We use Google Analytics (ID: G-57NSEDDS5E) to collect anonymous usage statistics such as page views, session duration, and general geographic region. Google Analytics sets cookies (_ga, _ga_*) that expire after up to 2 years. We use Google Consent Mode v2, which means analytics cookies are only activated after you give consent. For visitors in the EU/EEA and UK, a cookie consent banner is shown. For visitors outside these regions, analytics are enabled automatically. You can opt out at any time by clearing your browser's local storage.
• Cloudflare: May set security cookies to protect against malicious traffic.
• Cookie Test: We temporarily set a test cookie to detect if your browser accepts cookies. This cookie is immediately deleted after the test.

Local Storage

We use your browser's local storage to save:

• Theme preference: Your light/dark mode choice.
• Cookie consent choice: Whether you accepted or rejected analytics cookies (cookie_consent key). This allows us to remember your decision so you are not asked again.
• VPN Test comparison: When you run the VPN Test without a VPN, your IP address and internet provider are saved for 24 hours so the test can show a before-and-after comparison once you connect (vpnTestRealConnection key). You can delete it with the Forget button on that page.
• Fingerprint stability: A one-way hash of your browser fingerprint and the date of your last visit, used to show whether your fingerprint changed (fpLastHash and fpLastSeenDate keys).

This data is stored only on your device and is never transmitted to our servers.

Data Retention

We do not retain any personal data. Your IP address and location information are fetched in real-time and displayed to you without being stored on our systems.

Your Rights (EU/EEA Residents - GDPR)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can request information about what personal data we process about you.
• Right to Rectification: You can request correction of inaccurate personal data.
• Right to Erasure: You can request deletion of your personal data.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Object: You can object to the processing of your personal data.

We do not sell personal data, and our own servers do not keep a record of your IP address or test results: they are processed in real time, apart from the short-lived one-way hashes and cached lookups described above. Analytics data is processed by Google Analytics as described under Cookies; you can opt out by clearing your browser cookies and local storage or by using a browser that blocks analytics. To exercise any of the rights above, contact us via the contact page.

Legal Basis for Processing: Where data is processed by third-party APIs (listed above), the legal basis is our legitimate interest in providing the service you requested by visiting this website.

If you have concerns about how your data is handled, you have the right to lodge a complaint with your local data protection authority.

Your Rights (California Residents - CCPA)

If you are a California resident, you have the right to:

• Know what personal information is collected about you
• Request deletion of your personal information
• Opt-out of the sale of your personal information

Since we do not collect, store, or sell personal information, these rights are automatically fulfilled.

Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at:

[email protected]