Privacy Policy
Last updated: April 29, 2026. This policy explains what data WhatsMyIP.now collects, how we use it, and your rights as a user.
Introduction
WhatsMyIP.now ("we", "us", or "our") operates the website whatsmyip.now. We are committed to protecting your privacy. This Privacy Policy describes the personal data we collect, why we collect it, how we use it, and the choices you have.
By using WhatsMyIP.now, you agree to the practices described in this policy. If you do not agree, please do not use the site.
Data We Collect
We collect minimal data to provide our services. The table below summarises data types, purpose, and retention:
| Data Type | Why Collected | Retention Period |
|---|---|---|
| IP Address | Required to provide IP lookup and geolocation services. Displayed to you on the homepage. | Not stored (processed per-request only) |
| Server Access Logs | Standard server logs record IP address, browser user agent, page requested, and timestamp for security monitoring and abuse prevention. | 7 days, then deleted |
| Session Cookies | Used to maintain your session state (e.g. language preference) while you browse the site. | Until browser session ends |
| Language Preference Cookie | Stores your chosen interface language so it persists across visits. | 1 year |
| Account Email Address | If you create an account, we store your email address for authentication and service communication. | Until account deletion |
| Breach Check Queries | When you use the Breach Check tool, your email address is sent to the HaveIBeenPwned API. We do not store it ourselves. | Not stored by us |
| Analytics Data | Aggregated, anonymised page view statistics used to improve the site. No individual tracking. | 26 months (aggregated only) |
How We Use Your Data
We use the limited data we collect for the following purposes:
- To provide the IP lookup, geolocation, and privacy tools requested.
- To maintain and improve the security, performance, and reliability of the site.
- To detect, investigate, and prevent abusive or fraudulent use of the service.
- To comply with legal obligations, such as responding to valid court orders.
- To remember your language preference between visits.
We do not use your data for profiling, targeted advertising, or any purpose beyond operating this service.
Cookies
WhatsMyIP.now uses a small number of essential cookies. We do not use advertising cookies, third-party tracking cookies, or persistent behavioural tracking.
| Cookie Name | Purpose | Type | Expiry |
|---|---|---|---|
session |
Maintains your login session if you have an account. | Essential | Session |
locale |
Stores your selected interface language. | Functional | 1 year |
csrf_token |
Security token to prevent cross-site request forgery attacks. | Essential | Session |
You can control cookies via your browser settings. Disabling session cookies may prevent some features from working correctly.
Third-Party Services
We use a small number of third-party services to operate the site:
| Service | Purpose | Data Shared |
|---|---|---|
| IP Geolocation Provider | Resolves IP addresses to approximate geographic locations. | Your IP address (per request) |
| HaveIBeenPwned API | Checks if an email address appears in known data breach datasets. | Email address (only when you use Breach Check) |
| Cloud Hosting Provider | Server infrastructure. Processes all requests. | Standard server access data |
We do not use Google Analytics, Facebook Pixel, or any advertising network.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you.
- Right of erasure: Request that we delete your personal data.
- Right to rectification: Request correction of inaccurate personal data.
- Right to portability: Request your data in a portable format.
- Right to restrict processing: Request that we limit how we process your data.
- Right to object: Object to processing of your personal data.
To exercise any of these rights, contact us at our contact page.
Because most tools do not require an account and IP addresses are only processed per-request, we retain very little identifying data. Most requests for erasure will not be applicable.
Data Retention Summary
| Data Type | Retention Period |
|---|---|
| IP addresses (tool use) | Not stored – processed per request only |
| Server access logs | 7 days |
| Account information | Until you delete your account |
| Anonymised analytics | 26 months (aggregate only) |
| Session cookies | Deleted when you close your browser |
| Language preference cookie | 1 year |
Changes to This Policy
We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.
Contact
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us.