Privacy Policy
Last updated: October 6, 2026
1. Who is responsible
The data controller for www.ippriv.com and api.ippriv.com is LMF Solutions (SASU), 60 Rue François 1er, 75008 Paris, France, SIRET 991 974 130 00015, represented by its President, Brandon Visca. Full details are in the Legal Notice.
For any question about this policy or to exercise your rights, use the contact form.
2. What we do not do
- No user accounts, no payments, no advertising.
- No cookies. The site only stores your light or dark theme choice in your browser (localStorage).
- We do not sell or share personal data for marketing.
3. Data we process
3.1 Browsing the site
Our host, Vercel, processes technical request data (IP address, user agent, requested URL, time) to deliver pages and protect the service. Audience measurement uses Plausible Analytics, which does not use cookies and does not store IP addresses or build profiles.
3.2 The IP lookup tool and the homepage readout
To show your own IP address, your browser calls our API, which sees your IP address. When you or the page look up an IP address (yours or one you enter), that IP is sent to the geolocation, reputation and DNS providers listed below to build the result. Results are not stored by us.
The location map loads tiles from OpenStreetMap servers, which receive your IP address as part of each tile request.
3.3 The API
To enforce the limit of 100 requests per hour, the API keeps a counter keyed by the caller's IP address for a sliding window of one hour. Request logs record the method, path, status and time. Because the path contains the IP address being looked up, logs can include it. They are deleted after 30 days at most.
3.4 The contact form
We receive your name, email address, subject and message so we can reply. The message is sent by email through Resend and kept for up to 12 months after the conversation ends, then deleted.
4. Purposes and legal bases
- Providing the site, the tool and the API: our legitimate interest in operating the service you request.
- Security, abuse prevention and rate limiting: legitimate interest.
- Audience statistics (anonymous, no cookies): legitimate interest.
- Answering your messages: legitimate interest, or steps taken at your request.
5. Providers
These providers process data on our behalf or receive it to deliver the service:
| Provider | Role | Data |
|---|---|---|
| Vercel Inc. (US) | Website hosting | Technical request data |
| Cloudflare Inc. (US) | API hosting, DNS resolution | Caller IP, looked-up IP |
| Upstash Inc. (US) | Rate-limit counters | Caller IP, one hour |
| ip-api.com, ipapi.co | Geolocation data | Looked-up IP |
| IPQualityScore (US) | VPN, proxy and Tor detection | Looked-up IP |
| Google LLC (US) | Fallback DNS resolution | Looked-up IP |
| OpenStreetMap Foundation (UK) | Map tiles | Visitor IP |
| Plausible Insights OÜ (EU) | Anonymous statistics | No personal data stored |
| Resend Inc. (US) | Contact form email delivery | Form content |
Some providers are located outside the European Union. Where required, transfers rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. Your rights
Under the GDPR and French law, you can request access to, correction or deletion of your data, object to or restrict its processing, and ask for portability. Use the contact form; we answer within one month. You can also lodge a complaint with the CNIL (www.cnil.fr).
7. Changes
We update this policy when the service or its providers change. The date at the top shows the latest version.