Privacy
You can use every tool without an account. This page explains what is stored when you do.
Tools that run in your browser
The generators (SPF, DMARC, robots.txt, .htaccess and cron) and the Email Header Analyzer work entirely in your browser. What you type or paste into them is not sent to our server. The paste mode of the Robots.txt Tester works the same way.
Checks that run on our server
When you run a check such as a DNS lookup or an SSL check, your input (the domain, URL or IP address) is sent to our server so it can make the request. We use it to run the check and may keep the result in a short-term cache, usually for a few minutes, so a repeated check is faster.
For each check we also record the tool name, whether it succeeded, how long it took and when. This record does not include what you entered or your IP address. We use it to spot tools that are failing or slow.
The combined report stores its target and intermediate results in a server cache tied to your session. The report becomes unavailable after ten minutes. Individual tool results can be reused for up to ten minutes; their original measurement time is shown. Expired cache files and private recovery copies may remain until maintenance removes them.
Your IP address
- To limit how many checks one connection can run, we keep a counter tied to a one-way hash of your IP address for up to one hour.
- What Is My IP and the Open Port Checker use your IP address to show or test it. They do not store it.
- Our origin access logs include IP addresses, request paths and query strings, so a URL or domain submitted through a GET form may appear there. Logs rotate daily and retain seven rotated files plus the current log under the configured origin policy. Private recovery copies can have a separate lifetime.
Stored in your browser
Your theme, layout settings, favourite tools and recently used tools are saved in your browser's local storage. They never leave your device, and clearing your browser data removes them.
The site sets two cookies it needs to work: a session cookie (for example, to remember that you passed a bot check) and a security token that protects forms. We do not set advertising or tracking cookies.
Outside services
- Cloudflare delivery and Web Analytics. Cloudflare proxies requests and processes connection/request information to deliver and protect the site. Its Web Analytics beacon collects page-view and browser performance metrics. It is cookieless analytics, rather than an advertising cookie. See Cloudflare Web Analytics and Cloudflare's privacy policy for its processing.
- Cloudflare Turnstile runs an invisible browser check before protected server-side tools can run. We send the verification token and your IP address to Cloudflare to validate it. Cloudflare processes browser information under its Turnstile Privacy Addendum. A successful check is remembered in your session for one hour.
- IPinfo provides country and network data. When a tool shows that data, the IP address being looked up is sent to IPinfo.
- The sites you check. Server-side checks connect to the domain or URL you enter, from our server. The site sees our server, not you.
- Public DNS resolvers and registries. DNS and domain tools send the domain you enter to DNS servers and registry RDAP or WHOIS services. The DNSSEC Checker uses Cloudflare DNS over HTTPS for the requested domain and its zone.
Questions
Email [email protected] with any question about this page.
Last updated 26 October 2026.