No sign-up and no advertising or tracking cookies. Traffic is measured with Cloudflare Web Analytics, which sets no cookies and collects no personal data — page views only.
To avoid repeating lookups, checked IPs and their data are kept for 24 hours. We also count how often each IP was checked and its type, for on-site statistics.
Residential and mobile IP pages are marked noindex and left out of the sitemap. Only datacenter and proxy IP pages can be indexed. The exit IP you use when checking yourself on the home page never appears in any public list and its page is never indexed, whatever its type.
Browser checks (the exits each platform sees, WebRTC, DNS, time zone, language) run in your browser and the results are not sent to us. Two things do touch our servers. First, IPs the page finds (the exits Claude / ChatGPT see, your IPv4 / IPv6 exits, any IP exposed by WebRTC) are looked up for type and location — the same as if you had typed that IP in; DNS resolver IPs are only matched against a local database and not stored. Second, the DNS test has your resolver ask our authoritative DNS server, which keeps “random label → resolver IP” in memory for 10 minutes.
When you run the home-page check we store “exit IP, date, device hash” to count how many devices share an exit over 7 days. The hash comes from your browser’s UA and language plus a site secret, cannot be reversed, and is deleted after 8 days.
If you create a share link, the report is kept for 90 days. IPs are partly hidden first (last IPv4 octet; IPv6 keeps only the first three groups), and reports are not indexed.
If you submit a correction, we keep the IP, the type you chose and your reason. Only the reviewer sees the reason; the public list shows the network block only.
DNS-leak and TLS / TCP fingerprint checks run on a separate probe server. It sees your connection IP and your resolver’s IP, keeps them in memory for 10 minutes and never writes them to disk.
Accounts (optional): you can sign in with an email code, Google, GitHub, Apple or X. We store only the name, email, avatar and account ID needed to sign you in, and read nothing else from those services. Email codes are stored only as a hash and expire after 10 minutes. The session is a random-token cookie and the server keeps only its hash; for each signed-in device we keep the sign-in time, last-active time, browser and OS type, and sign-in IP, shown only to you under Account & security so you can spot and sign out devices you don’t recognize. They’re deleted when that session ends. Watched IPs you add, summaries of checks made while signed in (exit IP, verdict, score) and API lookups are stored; history is deleted after 90 days. You can clear history or delete the whole account any time under Settings, which removes all of it. Apart from sign-in codes and security notices (one each when you unlink a sign-in method, change your email or sign out all devices), the only email we send is the watch alert: when a watched IP changes, a note goes to your sign-in address through the email provider Resend; every alert has a one-click unsubscribe and you can turn alerts off in My account. We don’t sell data or send marketing email.
API keys are shown once and stored only as a hash; per-key daily IP lookups are counted for the quota and kept for 30 days.
The site is served through Cloudflare, which handles access logs under its own policy.
IP Judge ipjudge.org
