This notice explains which personal data is processed when you use the ipaddress.tr website, for what purpose and on what legal ground, to whom it may be transferred, how long it is kept and how you can exercise your rights. It is our information notice under Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK) and reflects how the software behind this site actually works; see also How it works. The Turkish and English versions say the same.
Data controller
The data controller responsible for your personal data is the operator of ipaddress.tr (name not yet published), with an address at an address not yet published; until then, use the contact form. You can reach us about any personal data matter through the contact form, choosing “Privacy request” in the form.
What we process, why and on what legal ground
IP address and request headers. To show you your IP address, network and approximate location, our server reads the IP address of the incoming connection and the headers your browser sends (such as the user agent and preferred languages). Together with other data an IP address can identify a person, so we treat it as personal data. We use it only to answer your request and to protect the site from abuse.
- The application does not store your IP address. For rate limiting it keeps a keyed hash in memory that is rotated every day.
- Network, routing, location and Tor data for your address come from datasets stored on our own server. Your address is not sent to any IP intelligence service.
- To show reverse DNS and registration data, your IP address is included in a DNS query to a recursive resolver and in an RDAP request to the regional internet registry responsible for it (for Turkish addresses, the RIPE NCC in the Netherlands).
Legal ground: this processing is necessary to provide the service you request and is based on our legitimate interest in its security (KVKK Art. 5(2)(f)).
Lookups you perform. IP addresses, domain names and AS numbers you enter are answered from our own datasets where possible; DNS and registration lookups are sent to the name servers and registries that hold the answer. We do not keep a history of your lookups. Results are cached in memory for a limited time without any link to you.
Tools that contact other servers. The TLS, HTTP header, security header and redirect tools connect from our server to the public address you enter. The port checker opens a single connection, on the port you choose, only to the address your request comes from. The blacklist check queries public DNS blocklists with the address you enter. The WebRTC leak test asks Cloudflare’s public STUN server for your address from your browser — only when you start the test — so Cloudflare sees your IP address. The latency test only sends requests to our own server. Addresses in a bulk lookup are processed in memory and not stored.
Aggregate statistics. We count page views per page and per day, with lookup values removed from the path. No IP address, cookie or identifier is stored. Counting is skipped when your browser sends Do Not Track or Global Privacy Control.
Contact form. If you write to us, we store your name, email address, subject and message so we can reply (KVKK Art. 5(2)© and (f)). Messages are deleted at the latest 12 months after receipt. The form may use Cloudflare Turnstile to prevent spam; in that case Cloudflare processes technical data about your browser. Giving these details is voluntary; without them we cannot reply to you.
Server logs. Our hosting infrastructure may keep short-lived technical access logs (including IP addresses) for security and troubleshooting.
We do not use your data for other purposes such as direct marketing or profiling.
Method of collection
Your personal data is collected electronically, by automated and partly automated means, through the requests your browser sends when you visit the site and what you type into forms.
Cookies and third-party services
We set no tracking cookies. If you switch language, a strictly necessary cookie remembers your choice. If the site operator enables Google Analytics or Google AdSense, these services are loaded only after you give your explicit consent in the banner (KVKK Art. 5(1)), and you can change your choice at any time under “Cookie settings”. Details are in the Cookie Policy.
Transfers
We do not sell or hand over your personal data. Lookup values, including your IP address when you look it up, can reach DNS resolvers and internet registries that answer RDAP and WHOIS queries, some of them abroad (for example the RIPE NCC in the Netherlands or ARIN in the United States). They receive only what is needed to answer the query; the transfer is a necessary part of the service you request and is made in line with KVKK Art. 9. If Google’s services are enabled, transfers abroad through them take place only with your explicit consent. If the site operator connects optional commercial data providers, they are listed with their status on How it works.
Security
The data we keep (contact-form messages and anonymous counters) is stored on our own server, protected by access controls, encrypted connections and an authenticated admin panel.
Your rights under the KVKK
Under Article 11 of the KVKK you may apply to the data controller to: learn whether your personal data is processed; request information about it if so; learn the purpose of processing and whether it is used accordingly; know the third parties in Türkiye or abroad to whom it is transferred; request correction of incomplete or inaccurate data; request erasure or destruction under the conditions of Article 7; request that correction, erasure or destruction be notified to the third parties it was transferred to; object to a result to your detriment arising exclusively from automated analysis; and claim compensation for damage caused by unlawful processing.
Because we do not store visitor IP addresses or lookup histories, in most cases there is no personal data we could provide or correct; contact-form messages are the exception.
To exercise your rights, send your request through the contact form with your name, a way to reply to you, the right you wish to exercise and, where relevant, the message it concerns. We will conclude your request free of charge within 30 days at the latest (KVKK Art. 13). If your request is refused, you find the answer insufficient or it is not answered in time, you may complain to the Personal Data Protection Board (KVKK Art. 14; www.kvkk.gov.tr).
Visitors from the European Union. If the GDPR applies to you, the legal basis for processing is our legitimate interest in providing and protecting the service you ask for (Art. 6(1)(f)) and, for Google’s services, your consent (Art. 6(1)(a)). You also have the rights the GDPR grants, including the right to object and to lodge a complaint with your supervisory authority.
Changes
We will update this page when the way the site processes data changes. The date at the top shows the latest revision.