This page explains which data ipsorgu.net processes and why. No account is needed to run lookups; if you create an account, the account data below is also processed.
IPSORGU. Contact: [email protected]
When you look up a domain, IP address or AS number, the target, the time and a salted hash of your visitor IP address (the raw address is not stored) are written to the lookup log. The log is used for the recent and popular lookup lists and for abuse detection, and is deleted after 90 days.
Only domain lookups are shown in the lists on the home page; IP address lookups are not listed. Looking up your own IP address is not logged. Requests from curl, wget and search-engine bots are not logged.
When generating a report, the target domain or IP is sent to the domain's authoritative DNS servers, to public DNS resolvers (Google, Cloudflare, Quad9 and others), to blocklist (DNSBL) operators, to the RIPE NCC RIPEstat and RDAP services and to the target's web server (SSL/HTTP check). These services see the query from our server's IP address, not yours.
Page fonts and the map library are loaded from our own server. The location map on the IP report loads OpenStreetMap tiles directly from your browser, so your IP address reaches the OpenStreetMap Foundation's servers. The WebRTC test on the "My IP" page makes your browser connect to a Google STUN server (stun.l.google.com). If you send many requests, the human-verification page loads the Cloudflare Turnstile script (challenges.cloudflare.com) from your browser. In the global reachability test, when you press "Run test" your browser sends the measurement request directly to the Globalping API (api.globalping.io); your IP address, the target you typed and the results reach Globalping and are stored publicly there, and our server does not handle this request. The "Start traceroute from Istanbul" button on the IP report works the same way. When you open a shared result link, your browser reads the result directly from Globalping; your IP address reaches Globalping and no new measurement is made. These requests are only made when you open the relevant page or start the relevant test.
The probes that run the measurements are servers of the Globalping community. The Istanbul measurement point is a server sponsored by Orfi (Netvia Bilisim, AS207483); tests from this point reach the target address from Orfi's network. Details: orfi.net.tr.
The site is served through Cloudflare, and every page loads the Cloudflare Web Analytics script (static.cloudflareinsights.com) from your browser. This measurement uses no cookies or local storage and, according to Cloudflare's documentation, does not fingerprint individuals by IP address, browser information or other data. Aggregate measurements such as page path, referring site, country, device type, browser, operating system and page load timings are sent to Cloudflare. According to the same documentation, your IP address is seen while the request is handled, discarded at the nearest data center and not written to Cloudflare's core databases or logs.
If you create an account we store your email address, last sign-in time, the SHA-256 hash of your API keys (the key itself is not stored), your monitored targets and the alerts sent. Sign-in links are single-use and valid for 15 minutes; used or expired tokens are deleted after 2 days. Sign-in links and monitoring alerts are sent through the email service Resend (resend.com); your email address and the message content pass through that service. To have your account deleted, write to the contact address.
We do not use cookies unless you sign in. When you open the sign-in page or sign in, a single session cookie (ipsorgu_s) is set and removed when the browser closes. Your theme preference is stored in your browser's local storage (theme) and is not sent to the server. If you pass human verification, a signed cookie bound to your IP address (ips_ok) valid for 1 hour is set; it is only used to grant a higher request limit. No advertising or tracking cookies are used; the Cloudflare Web Analytics used to measure pages does not use cookies or local storage either.
Under the Turkish Personal Data Protection Law (KVKK, no. 6698) you have the right to access, correct and delete your data and to object to its processing. To exercise these rights write to [email protected].