This policy explains what personal data ipaddress.co.il processes when you use the website, why, how long we keep it and how to exercise your rights. It is written for Israel’s Protection of Privacy Law, 5741-1981, as amended by Amendment 13 (in force since 14 August 2025), and the Privacy Protection (Data Security) Regulations, 5777-2017, and reflects how the software behind this site actually works; see also How it works. The Hebrew version of this policy is the original.
Controller
The controller of your personal data is the operator of ipaddress.co.il (name not yet published), with an address at an address not yet published; until then, use the contact form. You can reach us about any data protection matter through the contact form, choosing “Privacy request” in the form.
What we process and why
IP address and request headers. To show you your IP address, network and approximate location, our server reads the IP address of the incoming connection and the headers your browser sends (such as the user agent and preferred languages). An IP address is personal information under the law. We use it only to answer your request and to protect the site from abuse.
- The application does not store your IP address. For rate limiting it keeps a keyed hash in memory that is rotated every day.
- Network, routing, location and Tor data for your address come from datasets stored on our own server. Your address is not sent to any IP intelligence service.
- To show reverse DNS and registration data, your IP address is included in a DNS query to a recursive resolver and in an RDAP request to the regional internet registry responsible for it (for Israeli addresses, the RIPE NCC in the Netherlands).
Lookups you perform. IP addresses, domain names and AS numbers you enter are answered from our own datasets where possible; DNS and registration lookups are sent to the name servers and registries that hold the answer. We do not keep a history of your lookups. Results are cached in memory for a limited time without any link to you.
Tools that contact other servers. The TLS, HTTP header, security header and redirect tools connect from our server to the public address you enter. The blacklist check queries public DNS blocklists with the address you enter. The WebRTC leak test asks Cloudflare’s public STUN server for your address from your browser — only when you start the test — so Cloudflare sees your IP address. The latency test only sends requests to our own server. Addresses in a bulk lookup are processed in memory and not stored.
Aggregate statistics. We count page views per page and per day, with lookup values removed from the path. No IP address, cookie or identifier is stored. Counting is skipped when your browser sends Do Not Track or Global Privacy Control.
Contact form. If you write to us, we store your name, email address, subject and message so we can reply. Messages are deleted at the latest 12 months after receipt. The form may use Cloudflare Turnstile to prevent spam; in that case Cloudflare processes technical data about your browser.
Server logs. Our hosting infrastructure may keep short-lived technical access logs (including IP addresses) for security and troubleshooting.
We do not process information of special sensitivity, and we do not use your data for other purposes such as marketing or profiling.
Cookies and third-party services
We set no tracking cookies. If you switch language, a strictly necessary cookie remembers your choice. If the site operator enables Google Analytics or Google AdSense, these services are loaded only after you consent in the banner, and you can change your choice at any time under “Cookie settings”. Details are in the Cookie Policy.
Transfers
We do not sell or hand over your personal data. Lookup values, including your IP address when you look it up, can reach DNS resolvers and internet registries that answer RDAP and WHOIS queries, some of them outside Israel (for example the RIPE NCC in the Netherlands or ARIN in the United States). They receive only what is needed to answer the query, as a necessary part of the service you request. If the site operator connects optional commercial data providers, they are listed with their status on How it works.
Security
The data we keep (contact-form messages and anonymous counters) is stored on our own server, protected by access controls, encrypted connections and an authenticated admin panel.
Your rights
Under the Protection of Privacy Law you have the right to inspect information about you held in a database (section 13) and the right to ask for correction or deletion of information that is not correct, complete, clear or up to date (section 14). Because we do not store visitor IP addresses or lookup histories, in most cases there is no personal data we could provide or correct; contact-form messages are the exception.
To exercise your rights, send your request through the contact form with your name, a way to reply to you, the right you wish to exercise and, where relevant, the message it concerns. We will answer within the periods set by law.
If you believe your right to privacy has been infringed, you may turn to the Privacy Protection Authority at the Ministry of Justice.
Visitors from the European Union. If the GDPR applies to you, the legal basis for processing is our legitimate interest in providing and protecting the service you ask for (Art. 6(1)(f)) and, for Google’s services, your consent (Art. 6(1)(a)). You also have the rights the GDPR grants, including the right to object and to lodge a complaint with your supervisory authority. The European Commission recognises Israel as providing an adequate level of protection for personal data.
Changes
We will update this page when the way the site processes data changes. The date at the top shows the latest revision.