Privacy
We keep as little as possible, and never longer than needed.
What we log
For security and abuse prevention we keep limited access logs:
- time, requested page or API endpoint, HTTP status and response time;
- a truncated IP address: the last part is removed (IPv4 to /24, IPv6 to /48), so it cannot be traced to a single connection.
We do not log the domains, IP addresses or email addresses you check, your user agent, the referring page or cookies. NetTrace uses no cookies, analytics or trackers.
Retention
Access logs are deleted automatically after 14 days.
Rate limiting
To prevent abuse we count requests per IP address. This happens in memory only and is never stored.
What happens to your query
To run a check we send the name you entered as a DNS query to the 84 public resolvers in our list (such as Cloudflare, Google and Quad9), to DNS blacklists, or, for the security scan, connect to the domain's web server. For IP info we look up the queried IP address at RIPE NCC (RIPEstat) and the internet registry's RDAP service. Those parties see a query from the NetTrace server, not from your device. Results are cached briefly in memory: a complete check for at least 30 seconds and at most 1 hour.
Hosting
NetTrace runs on a server in the European Union.