Privacy policy

We collect little, and we keep it for a defined time. This page lists exactly what is stored.

What we collect

• A random visitor ID in a cookie (ipask_vid), used only to count the free daily quota. No personal data.
• Request metadata — IP address, timestamp, endpoint, status code — for abuse prevention, quota counting and uptime debugging.
• Order data — the email you optionally provide, order ID, amount and status. Card or crypto payment details are handled by the payment gateway, not by us.

What we store about checked IPs

When you check an address on this site, we keep a small derived record so repeat checks and history pages work:

• Per-IP counters — how many times an address was checked and when it was last seen (90 days).
• Status history — a line only when the classification of an address changes (90 days).
• Outcome signals — the optional “did this IP work for you?” answer: platform, network type, result (180 days). No account, key or order is attached.
• Reports you create — the IP list and verdicts behind a shared report link (90 days, or until the link is deleted).
• Registry cache — RDAP / PTR facts for an address (30 days).
• Query history — for each anonymous visitor ID or license key: batch size and a short sample of the addresses checked (90 days).
• Trial cooldown — the IP and date used to issue a free trial key (30 days).
• Feedback and dispute records — the address, the reason and the date you submit them (90 days).
• Watchlist — pools you ask us to re-check, tied to your key, plus any webhook URL you choose to set (90 days after the last check).
• Contact messages — name, email, message text and the sending IP (90 days).

What we do not collect

• No accounts, no device fingerprints, no advertising identifiers, no cross-site tracking.
• No analytics or ad scripts are embedded in the page.
• The local check mode never uploads the addresses you paste — matching happens in your browser.

Third parties

• Payment gateway (our own EPUSDT deployment) — processes the USDT payment and calls our server back with the result.
• Public data sources — MaxMind GeoLite2, DB-IP Lite, IPtoASN, PeeringDB, Tor exit list, Spamhaus DROP, RIR RDAP, RIPEstat. We query them; they do not receive your pasted lists.

Retention schedule

• Server access logs: 14 days (rotated daily, compressed).
• Per-IP counters and status history: 90 days.
• Shared report links: 30 days.
• Outcome signals: 180 days.
• Registry (RDAP/PTR) cache: 30 days.
• First-seen date of an address: 365 days.
• Order records: kept for accounting as required by law.

Deletion runs automatically every night. You can also erase an address yourself or write to us — see below.

Your rights

You can ask what we hold about an address or order, and ask us to delete it. Write to hi@ipask.net or use the feedback form. We answer within 30 days. If you are in the EU/UK you may also complain to your local data protection authority.