A network diagnostic should collect less, not more.

Data processed for a diagnostic

The web server receives the source IP required for an internet connection. The application uses that address in memory to query local GeoLite, Tor, relay, and ASN files. Public IP or domain searches are processed only when submitted by the visitor.

EasyGeoIP does not ask for a name, email address, password, payment information, precise device location, or VPN account.

Storage

The application does not save diagnostic results. A short-lived rate-limit file stores a keyed hash derived from the source address, a request count, and a window start time. It does not contain the plain IP and exists only to limit automated abuse.

The “Save as baseline” feature uses localStorage in the browser. The baseline is not uploaded and can be deleted with the button provided or by clearing site data.

Server logs

Hosting software and reverse proxies may create security and access logs outside the PHP application. Production deployment should minimize fields, restrict access, and use a short retention period. EasyGeoIP does not add application-level IP logs.

Third parties

No Google Analytics or similar client analytics script is loaded. The WebRTC test runs locally and does not submit candidates. The optional IPv6-only test connects to an EasyGeoIP endpoint configured by the operator.

Links to VPN providers open external websites. When an operator configures an affiliate URL, the link is labelled and receives a sponsored/nofollow attribute. The provider may process data under its own policy after a visitor follows the link.

Cookies and local storage

The application does not require cookies. Local storage is used only when the visitor explicitly saves a baseline. Mobile navigation and tests do not require persistent identifiers.

Contact

Privacy and correction questions can be sent to [email protected]. Never include passwords, VPN credentials, or information unrelated to the diagnostic.