Privacy Policy

Last updated: 2026-06-01

What we collect

We do not log the IP addresses you look up, store query history, or build user profiles. We track aggregate request counts for capacity planning only. No personally identifiable information is stored. We also count, in aggregate and without cookies or any identifier stored on your device, whether a visit comes from a real browser or an automated client, which country it comes from, and how many visitors choose "Allow" or "Essential only" on the banner. Requests from command-line tools and API clients are counted the same way, along with the type of page or endpoint, but never the IP addresses or queries you look up, query strings or API keys.

Cookies

We store your language preference and theme setting in localStorage. The homepage search bar also keeps a local search history and any lookups you star, entirely in your own browser's localStorage — never sent to or logged by our servers, and visible only to you. Clearing your browser storage clears it. No third-party tracking cookies are set.

Analytics

If you opt in via the banner on first visit, we turn on two analytics tools. Cloudflare Web Analytics is a cookieless script that reports page-view counts. Our own self-hosted analytics runs on ipto.to infrastructure and sends nothing to any third party; it records the pages you view, the referring site and campaign tags, your browser, operating system, language and screen size, an approximate location (country, region and city, derived from your IP address; the address itself is not stored), and a random visitor ID kept in your browser's localStorage (not a cookie) so we can recognise return visits. Both are off by default and stay off until you choose "Allow analytics." Declining costs you nothing; the site behaves identically either way. To withdraw consent, clear this site's data in your browser.

Third-party services

Map tiles are loaded from CartoDB / OpenStreetMap when you perform an IP lookup. Google Fonts is used for typography. Weather data is from the U.S. National Weather Service (NOAA, public domain) for locations in the United States and from MET Norway (the Norwegian Meteorological Institute, licensed under NLOD 2.0 and CC BY 4.0) everywhere else. Sunrise, sunset and moon times are calculated by ipto.to. Place names and postal codes come from GeoNames (CC BY 4.0).

Contact

Questions? hello@ipto.to

Account data (Google Sign-in)

If you create an account using "Sign in with Google" — including the Google One Tap prompt — we receive your Google account ID, name, email address, and profile picture URL from Google. We use this to create and maintain your ipto account: your API key, usage tier, and the request history shown on your dashboard. We never sell this data or share it with third parties, and signing in does not give us access to your Gmail, contacts, or anything else in your Google account beyond your basic profile.

Data retention & deletion

Account and usage data is kept for as long as your account is active. To delete your account and all associated data (profile, API key, usage history), email hello@ipto.to from the address on file and we'll remove it within 30 days.