Privacy Policy

IP-FD.net ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services.

We collect the following types of information:

• Account Information: When you register, we collect your username, email address, and password (stored securely hashed). If you sign in via GitHub or Discord, we receive your profile ID, username, and avatar from those platforms.

• Usage Data: We log API requests including the endpoint accessed, IP queried, country, and timestamp. This is used for rate limiting and service improvement.

• Cookies: We use essential cookies for authentication (session token) and CSRF protection. We do not use advertising or tracking cookies.

• IP Address: When you visit our site, your IP address is processed to provide our core service (IP lookup). We do not permanently store visitor IP addresses beyond API usage logs.

We use your information to:

• Provide and maintain our services
• Authenticate your account and manage sessions
• Enforce rate limits and prevent abuse
• Respond to support tickets and contact requests
• Improve our services based on usage patterns

We do not sell, trade, or share your personal information with third parties. We may disclose information only if required by law or to protect our rights and the safety of our users.

Account data is retained until you delete your account. API usage logs are retained for 90 days. Session data expires after 30 days. You may request deletion of your account and all associated data at any time via the Dashboard.

Our service uses the following third-party services:

• OpenStreetMap / Nominatim: For map tiles and geocoding on IP lookup pages
• Google Fonts: For typography (Inter, JetBrains Mono)
• GitHub / Discord OAuth: Only when you choose to sign in with these providers
• icanhazip.com: For the front page connectivity test (client-side only)

We implement industry-standard security measures including HTTPS encryption, bcrypt password hashing, CSRF protection, Content Security Policy headers, rate limiting, and parameterized database queries to prevent SQL injection.

You have the right to:

• Access and export your account data
• Correct inaccurate information
• Delete your account and all associated data
• Opt out of non-essential data collection

To exercise these rights, visit your Dashboard or contact us.

We may update this Privacy Policy from time to time. Changes will be reflected by the "Last Updated" date at the top of this page. Continued use of our services after changes constitutes acceptance of the updated policy.

For privacy-related questions or concerns, please contact us via our Contact page at /contact.