Privacy Policy

1) Who we are and how to contact us

Controller: WHOIX LTD, a private limited liability company registered in Cyprus with company number HE 356927.
Registered address: Georgiou Zolota 5A, Strovolos, Nicosia, Cyprus.
Email: [email protected]

We have not appointed a Data Protection Officer and are not required to do so under Article 37 GDPR given the nature and scale of our processing. No separate EU/UK representative is required because the controller is established in the EU (Cyprus).

2) Scope

  • whoer.net and subdomains;
  • diagnostic tools (IP lookup, VPN/Proxy check, browser fingerprint page, DNS/WebRTC leak tests, IP blacklist checks, basic port scan);
  • public APIs and embeddable widgets;
  • advertising‑supported content (e.g., Google AdSense; Mediavine).

Third‑party sites and services linked from the Website are governed by their own policies.

3) Definitions

“Personal data” (GDPR) / “Personal information” (US) means information related to an identified or identifiable natural person. “Cookies” includes similar local storage technologies (e.g., localStorage). “Targeted advertising” (US) refers to cross‑context behavioral advertising.

4) Information we process

A. Information you provide

  • Support / feedback you send to us.
  • API inputs required to run diagnostics (e.g., a host you choose to scan).

Do not include unnecessary personal data in free‑text fields.

B. Information collected automatically

  • Identifiers & device info: IP address, coarse geolocation inferred from IP, user‑agent, OS and browser type/version, language, device type.
  • Website activity: referrers/exit pages, timestamps, URL parameters, error codes, performance metrics.
  • Networking signals (tool‑specific): e.g., TLS/HTTP signatures (including ALPN/H2 status), WebRTC candidates for leak tests, DNS resolver behavior, port reachability for the target you specify, VPN/Proxy heuristics and similar diagnostic telemetry.
  • Cookies/local storage: see Section 11.

About the tools. Some tests necessarily trigger network requests to deliver the results you initiate. For port checks/scans you start, our systems may query the target you provide solely to return the result. Do not scan hosts or networks without authorization. You are responsible for choosing targets and complying with applicable law and acceptable‑use policies.

C. Information from partners/third parties

  • Advertising & measurement signals (Google; Mediavine and its partners) — see Sections 12–13.
  • Security/abuse prevention: threat intelligence or IP‑risk lists to prevent abuse and ensure service integrity.

We do not attempt to associate diagnostic signals with a real‑world identity unless you contact us and provide that context (e.g., for support).

5) Purposes of processing

  1. Provide the Website/tools and return results you initiate;
  2. Operate, maintain, and improve performance, reliability, and security;
  3. Detect, prevent, and respond to fraud, abuse, and attacks;
  4. Measure and optimize content, features, and advertising;
  5. Comply with legal obligations and enforce terms;
  6. Communicate with you (support, service notices).

7) Automated Decision‑Making and Profiling

Whoer.net does not use automated decision‑making that produces legal effects concerning you or similarly significantly affects you within the meaning of GDPR Articles 13(2)(f) and 14(2)(g).

Advertising partners. Where you consent to personalized advertising (see AdSense and Mediavine sections), our partners may use automated processing to assign you to audience segments based on cookies or similar identifiers, device/browser information, and your interactions with pages and ads. The consequence is the delivery of ads that are more relevant to your interests. You can withdraw consent or opt out at any time via the consent banner/settings and the industry tools linked in this Policy.

8) Is Providing Personal Data Mandatory?

  • Website access and diagnostics. Certain technical data (e.g., IP address, basic device/browser information) are generated by your device and are necessary to establish a connection and return the results you request. If this data is not available, the Website cannot function correctly.
  • Cookies/consent. Non‑essential cookies (e.g., for personalized ads/analytics) are not mandatory and require your consent where applicable. Refusing them may limit personalization or certain measurements but the core Website will still be available.
  • Support inquiries. If you contact us, providing contact details and relevant context is necessary to process your request; otherwise we may be unable to respond or resolve the issue.
  • API/tests you initiate. If you do not provide the parameters (e.g., a target host) required for a test, we cannot run that test and return a result.

Unless expressly stated otherwise, providing personal data is not a statutory or contractual requirement; however, not providing certain information may prevent us from delivering specific features you request.

9) “Sale” / “Sharing” and targeted advertising (US–State Laws)

Some US state privacy laws consider cross‑context behavioral advertising a “sale” or “sharing.” Where applicable, we offer a “Do Not Sell or Share My Personal Information” choice and honor Global Privacy Control (GPC) signals (and, in Colorado, the state‑recognized universal opt‑out mechanism).

10) Data retention

  • Web & security logs: retained up to 90 days (longer if required for incident investigation or legal claims).
  • Diagnostic outputs: kept transiently to deliver results and troubleshoot (longer if tied to a support ticket).
  • Advertising/measurement data: per our partners’ retention schedules and applicable law.
  • Aggregated, de‑identified metrics: may be retained without time limit.

11) Cookies and similar technologies

We use first‑party and third‑party cookies, local storage, tags/pixels, and similar technologies to operate the Website, remember preferences, measure performance, prevent fraud, and support advertising.

  • Consent & controls: manage via our Consent & Cookie Settings and your browser/device settings (blocking/deleting cookies may limit features).
  • EU/UK/CH: we use a Google‑certified Consent Management Platform (CMP) integrated with IAB Europe’s TCF 2.2 where required, and implement Google’s Consent Mode (v2) for AdSense/Ads signals.

You can reopen the consent banner at any time via the Consent & Cookie Settings link to review or withdraw your choices (including “reject all”).

12) Google AdSense & Google services

We display ads via Google AdSense. Google may use cookies and advertising identifiers to serve ads, measure performance, and detect fraud/abuse. If you grant consent (or where permitted by law), Google may personalize ads. You can manage preferences through Google’s Ads Settings and industry opt‑out pages (DAA/NAI/AppChoices). Rejecting cookies/personalization does not eliminate ads; it results in non‑personalized ads.

Compliance note: We use a Google‑certified CMP for users in the EEA, the UK, and Switzerland and obtain consent consistent with Google’s EU User Consent Policy. We also implement Consent Mode v2 to respect your choices for ad personalization and measurement.

Learn how Google uses information from sites or apps that use its services: How Google uses information from sites or apps that use our services

Controls: Google Ads Settings; DAA; NAI; AppChoices (mobile).

For details on Google’s ad technology providers, see Google Ad Technology Providers.

We do not pass information to Google that Google could use or recognize as personally identifiable information (PII). Avoid including PII in URLs or page content associated with ad requests.

13) Mediavine Programmatic Advertising

The following disclosure is provided at Mediavine’s request and included verbatim:

Mediavine Programmatic Advertising (Ver 1.1)

The Website works with Mediavine to manage third-party interest-based advertising appearing on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a “device”) by the web server so that a website can remember some information about your browsing activity on the Website.

First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, “Tags”) may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser’s cache. The "help" feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser’s cache. For more information about cookies and how to disable them, you can consult the information at All About Cookies.

Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site. In the event you opt-out, you will still see non-personalized advertisements on the Website.

The Website collects the following data using a cookie when serving personalized ads:

  • IP Address
  • Operating System type
  • Operating System version
  • Device Type
  • Language of the website
  • Web browser type
  • Email (in hashed form)

Mediavine Partners (companies listed below with whom Mediavine shares data) may also use this data to link to other end user information the partner has independently collected to deliver targeted advertisements. Mediavine Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from Mediavine publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and advertisements and websites, geolocation data, traffic data, and information about a visitor’s referral source to a particular website. Mediavine Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising.

If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit National Advertising Initiative opt out page. You may also visit Digital Advertising Alliance website and Network Advertising Initiative website to learn more information about interest-based advertising. You may download the AppChoices app at Digital Advertising Alliance’s AppChoices app to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.

For specific information about Mediavine Partners, the data each collects and their data collection and privacy policies, please visit Mediavine Partners.

14) How we share information

  • Service providers / processors (hosting, security, content delivery, measurement);
  • Advertising partners (Google AdSense; Mediavine and its partners) to display, measure, and improve ads per Sections 12–13;
  • Legal/compliance when required to comply with law, enforce terms, or protect rights and security;
  • Business transfers (e.g., merger/acquisition) subject to appropriate safeguards.

We do not sell databases of personal contact information. We do not provide advertisers with your direct identifiers unless you have provided them and consented to such use.

15) Your privacy rights

EU/UK/CH (GDPR & ePrivacy)

You may request access, correction, erasure, restriction, portability, or objection. Where we rely on consent, you can withdraw it through our consent tool. You also have the right to contact your supervisory authority.

US–State Laws (e.g., California, Colorado)

You may have rights to know/access, delete, correct, and to opt out of sale/sharing and targeted advertising. We honor GPC signals and, in Colorado, the state‑recognized universal opt‑out mechanism.

How to exercise: use Your Privacy Choices / Do Not Sell or Share (site footer) or email [email protected]. We may need to verify your request. Authorized agent requests are honored where permitted.

Minors: We do not knowingly sell or share personal information of consumers under 16 years of age. Where applicable, sale/sharing requires prior opt‑in consent (ages 13–16).

If we deny your request, you may have the right to appeal the decision. Instructions will be provided in our response; you can also contact [email protected].

16) International data transfers

We operate globally. Where required, we rely on Standard Contractual Clauses (SCCs) and/or the EU–U.S. Data Privacy Framework (DPF) (for eligible partners) or other lawful mechanisms, and implement appropriate safeguards.

17) Security

We use technical and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is 100% secure; risk cannot be eliminated.

18) Children’s privacy

The Website is not intended for children under 13 (or under 16 in the EU/UK where consent standards differ). We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact [email protected].

19) Disclaimers; responsible use of diagnostic tools

Our tools are provided “as is” for informational/diagnostic purposes. Results can be affected by network conditions, device/browser settings, intermediaries, or third‑party services. You are responsible for how you use the results. Do not use the Website/tools to violate any law, infringe rights, or access/scan systems without authorization. We disclaim all warranties and limit liability to the maximum extent permitted by law.

20) Changes to this Policy

We may update this Policy. We will update the “Effective date” above and, where required, seek renewed consent or provide additional notice.

21) How to reach us

Email: [email protected]
Postal address: Georgiou Zolota 5A, Strovolos, Nicosia, Cyprus.

This website uses cookies to enhance your experience.