Privacy Policy

1. Who is responsible

2. What we process and why

• Server logs. When you visit the site, our servers record technical request data (shortened IP address, time, requested page, browser type). The last part of an IPv4 address and the last 80 bits of an IPv6 address are removed. Logs are deleted after 30 days. Purpose: security, error analysis and abuse prevention. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.
• Rate limiting. To keep the service available we count requests per IP address in a short-lived memory cache; these counters expire within minutes. Legal basis: legitimate interest, Art. 6(1)(f) GDPR.
• Lookups you run. The host name, IP address or domain you enter is sent to public DNS resolvers, the regional internet registries (RDAP/WHOIS) and, for ASN data, a public routing data service, and ping packets are sent to the target. Your own IP address is not passed on to the registries or resolvers. Results may be cached for up to 24 hours, keyed by the target and not by you. No lookup history is kept. Legal basis: performance of the service you request, Art. 6(1)(b) GDPR.
• "What's my IP address?" Your IP address is read from the request and shown back to you only. It is not stored or cached.
• Cookies. The site itself sets no cookies. The only cookies are the optional analytics cookies described below.

3. Google Analytics

With your consent we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to count visits and see which tools are used. Analytics cookies and data collection stay off until you click "Accept" in the banner; if you click "Decline", no analytics cookies are set and no analytics data is sent.

• Data collected after consent: pages viewed, approximate location, device and browser, and a pseudonymous identifier stored in a cookie. Google Analytics 4 does not log or store IP addresses.
• Retention: Google Analytics keeps user- and event-level data for 2 months and then deletes it automatically; only aggregated, non-identifying statistics are kept longer.
• Legal basis: your consent, Art. 6(1)(a) GDPR and the national ePrivacy rules. You can withdraw it at any time with "Cookie settings" in the footer; withdrawal does not affect processing done before.
• Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission). Advertising features are switched off.
• You can also prevent collection with the browser add-on available at tools.google.com/dlpage/gaoptout.

4. Hosting and recipients

The site is hosted on a virtual server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (data centre in Nuremberg), under a data processing agreement according to Art. 28 GDPR. We do not sell personal data and do not use it for advertising.

5. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). Where processing is based on consent you may withdraw it at any time (Art. 7(3)). Write to the email address in section 1. Because logs hold only shortened addresses, we may not be able to link them to you.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work. The authority responsible for us is the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

6. Changes

We update this policy when the service or the law changes. The current version is always on this page.