Privacy

No ads, no trackers, no analytics scripts, no account required.

What's stored

Running an individual check does not store anything — the result exists only in the page returned to you. Running a full report card creates a stored scan: the domain you scanned, the results, and the time it ran. It gets a random, unguessable link so it can be shared, and it is automatically deleted after about 30 days. You can also delete it immediately from its own page at any time.

What we see about you

Like any web request, your IP address is visible to the server while a request is being handled, and to Cloudflare's network as our infrastructure provider — this is how What’s My IP works at all. It is not stored alongside scan results, and no profile is built from it.

Third-party lookups

Some checks query public third-party services on your behalf — Certificate Transparency logs (crt.sh), domain registration data (RDAP via rdap.org), and the HSTS preload list status (hstspreload.org). Those services see the domain being looked up and the request coming from our infrastructure, not from you directly.