We built these tools to answer questions without collecting information about you.
Your IP address
Every website receives your IP address when you visit — that's how the internet works. We show it back to you along with the approximate location and provider that our hosting company, Cloudflare, derives from it. We don't store it or keep a history of visitors.
Your browser, operating system, screen and window size are read by your own browser and never sent to us. The request headers we show are the ones your browser sends to every website; we display them back and don't store them.
Your lookups
To answer a WHOIS or DNS lookup, or to verify a name in the domain check, we send the domain name you typed to the relevant registry and to Cloudflare's public DNS resolver. The quick scan of the domain check runs in your browser, which asks Cloudflare's public DNS resolver (1.1.1.1) directly, or Google Public DNS when Cloudflare doesn't answer. We don't link lookups to you or keep a history of them. Answers may be cached for a short time to reduce load on the registries. If a registry won't answer our server, your browser asks that registry directly, so the registry then sees your IP address.
Speed test
The speed test sends and receives test data only. The results are calculated in your browser and are not saved.
Traceroute, ping and DNS propagation
Traceroutes, pings and DNS propagation checks are run by Globalping, a free measurement network operated by jsDelivr. Your browser sends the address you enter straight to Globalping, which therefore also sees your IP address. Globalping keeps measurement results public for up to six months.
SSL check
Your browser asks Cert Spotter, a free service by SSLMate, directly for the certificates of the name you enter, so Cert Spotter also sees your IP address.
WebRTC leak test
The WebRTC test, and the WebRTC badge on the home page, run in your browser. Your browser asks Cloudflare's public STUN server (stun.cloudflare.com) for its public address. The comparison happens in your browser, and the result isn't sent to us.
MAC vendor lookup
The MAC lookup runs in your browser. It downloads the part of the registry that matches the first byte of the address; the full address you type isn't sent to us.
Email header analyzer
The header analyzer runs in your browser. The headers you paste aren't sent to us or anyone else.
Password leak check
Your password never leaves your browser. Your browser sends only the first 5 characters of the password's SHA-1 hash to the Pwned Passwords service of Have I Been Pwned, which therefore sees your IP address but can't learn the password. Nothing is sent to us.
Reverse image search
The links open the search service you choose, and your browser sends the image address straight to it. We don't see, upload or store the image.
Disposable email
Mail sent to a disposable address is stored as plain text in a Cloudflare database for as long as the address lives, at most 24 hours, and then deleted. Attachments are never stored, and we don't read the messages. The inbox opens only with a secret key that stays in the browser that created it; we keep only a scrambled (hashed) copy of that key.
Unlike the other tools, the disposable inbox keeps a log so that abuse can be investigated and lawful requests from the authorities answered. When you create, extend or delete an address we record your IP address, your browser (user agent) and the time; for every mail an address receives we record its sender, subject and time. The log is encrypted, only the site owner can open it, and each entry is deleted automatically after 1 year. A list of addresses already handed out is kept so that none is given to a second person.
To limit how many addresses one visitor creates per hour, we also count requests using a scrambled form of the IP address that is deleted after two hours.
Port check
The port check connects from our host to your own public IP address only, on the ports you choose. Nothing is stored.
Cookies
We don't use cookies or analytics.
Hosting
The site runs on Cloudflare, which processes requests as our hosting provider under its own privacy policy.