Privacy Policy

This policy explains what information DNS Toolbox ("we", "us") at www.dnstoolbox.us collects, how it's used, and the choices you have.

Information we process

Connection data. When you visit, our hosting providers receive your IP address and the information your browser sends, such as its user agent. The What Is My IP? tool shows your address back to you, with a reverse DNS lookup and the registration record for your address.

Lookups that run in your browser. Most tools run in your browser and send queries directly to public services: Cloudflare's and Google's DNS-over-HTTPS resolvers, the regional internet registries and rdap.org (RDAP), RIPEstat, and DNS blocklist operators. Those services see your IP address and the domain or IP you looked up, under their own privacy policies.

Lookups that run on our server. Spamhaus blocklist checks, SSL/TLS certificate checks (which also query public Certificate Transparency logs) and security header checks run on our server, and so does the HTTPS reachability check that replaces a ping or traceroute when the probe network can't be reached. We don't store the domains or IP addresses you submit.

Ping, traceroute and DNS propagation. The host name or IP address you test is sent to Globalping (operated by Volentio JSD Limited), which runs the test from its probe network. Globalping treats measurement data, including the target, as public. Don't use these tools for host names you need to keep confidential.

Email Header Analyzer. Headers you paste can include names, email addresses and server names. They are analysed entirely in your browser and are never sent to our server. Your browser does send DNS queries for the domains and DKIM selectors in the headers, through the public resolvers named above.

Contact form. When you use the contact form, we store your name, email address, topic and message in our hosting provider's database and send a notification to the site owner by email. We keep messages for up to 12 months, then delete them.

Abuse prevention. To enforce rate limits we store a keyed hash of your IP address (not the address itself) with a request count. These records are deleted within about an hour. Some tools use Cloudflare Turnstile to check that a request comes from a person; Turnstile may process your IP address and browser signals.

We don't offer accounts, and we don't sell your personal information.

Cookies, advertising and analytics

We use Google AdSense to show ads and Google Analytics to understand how the site is used. Google and its partners may use cookies or similar technologies to serve ads based on your prior visits to this and other websites and to measure performance. You can opt out of personalised advertising at Google Ads Settings or aboutads.info. Learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent through Google's consent message before advertising or analytics cookies are used. You can change your choice at any time with the privacy settings link that message provides.

We store your light or dark theme preference in your browser's local storage. It never leaves your device.

Service providers

• Base44 (and its hosting providers): website hosting, server-side functions, the contact-message database and notification email.
• Cloudflare: DNS for our domain, the DNS-over-HTTPS resolver used by browser lookups, and Turnstile bot protection.
• Google: AdSense advertising, Google Analytics, and a fallback DNS-over-HTTPS resolver.
• Globalping (Volentio JSD Limited): ping, traceroute and DNS propagation measurements; measurement data is public.
• Spamhaus: blocklist lookups through its Data Query Service.
• Regional internet registries, rdap.org and RIPEstat: IP and domain registration and routing data.
• Certificate Transparency log services (crt.sh, Cert Spotter): certificate history for the SSL/TLS check.

Your rights

Depending on where you live, you may have rights to access, correct, delete or object to the processing of your personal information, and to withdraw consent. Because we don't keep accounts, most data is deleted automatically within the periods above. To make a request, use the contact form or email appsupport@dnstoolbox.us.

Children

This site is intended for a general and professional audience and is not directed to children under 13.

Changes

We may update this policy. The date at the top of this page shows when it last changed.