Privacy Policy
Effective November 5, 2026 · NexaYori LLC
This policy explains what information NexaYori LLC (“we”) handles when you use NexaYori Tools (the “Service”), and why. The short version: we don’t require an account, we don’t store what you look up or your IP address, and we don’t sell personal information.
1. What we collect and keep
| Information | What and why | How long |
|---|---|---|
| Usage counts | Daily counts of how many times each tool was used, the output format (browser, plain text or JSON), the visitor’s country (from our network provider) and whether the request succeeded. No IP addresses, queries or browser details are included. Used to understand which tools are used and to keep the Service running. | Kept as aggregate statistics |
| Contact form messages | The topic, your name (optional), your email address and your message, plus the country the message was sent from. Used only to respond to you. | Until handled, then deleted within 12 months |
| Error records | When a tool fails, which tool failed and the technical error message (which can mention the name or address being checked, but never your IP address). Used to fix bugs. | The most recent 500 events |
What you type into a tool (a domain, an IP address, a URL, a MAC address) is processed in memory to produce your result and is not stored by us. Some public results are held briefly in memory to reduce load on third parties (for example, certificate-log results for a hostname for up to one hour); these are about the hostname, not about you.
To limit spam, the contact form keeps a short-lived, in-memory count of recent submissions per IP address. It is never written to storage; entries older than an hour are discarded as new messages arrive, and all of it is lost whenever the server process restarts.
2. Our hosting provider
The Service runs on Cloudflare, Inc., which processes all traffic to the site (including your IP address and request details) to deliver it and protect it from attacks, under Cloudflare’s own privacy policy. We have turned off per-request logging in our Cloudflare application logs; Cloudflare may still keep limited security and operational logs according to its policies. Contact form messages and usage counts are stored in Cloudflare’s database service in the United States.
3. Services we contact on your behalf
Some tools contact other services to do their job. Unless the table says otherwise, those requests come from Cloudflare’s network, not your device, so they carry what you entered but not your IP address.
| Tool | Who | What they receive |
|---|---|---|
| What’s my IP | ipify (api.ipify.org, api6.ipify.org) | Your browser connects to ipify directly to detect your other IP version, so ipify sees your IP address. |
| What’s my IP | Cloudflare DNS (1.1.1.1) | Receives your IP address as a reverse-DNS lookup, to find your hostname. |
| Ping | Globalping (jsDelivr) | Receives the host you enter and the location you pick, and runs the test from its probes. Results are public to anyone with the result link, for about six months. |
| Ping | Cloudflare DNS (1.1.1.1) | Receives the hostname, when testing from our server. |
| Ping | The host you enter | Receives pings from the probes, or TCP connections from our server. If you press “Test from your browser”, it receives requests directly from your browser and sees your IP address. |
| Traceroute | Globalping (jsDelivr) | Receives the host you enter and the location you pick, and runs the trace from its probes. Results are public to anyone with the result link, for about six months. |
| Traceroute | Google Public DNS (8.8.8.8) | Receives the public router addresses along a route, to look up their hostnames. For a traceroute you paste, that includes routers near you. Networks are looked up in our own copy of the data; private addresses are never looked up. |
| IP / ASN lookup | Cloudflare DNS (1.1.1.1) | Receives hostnames you enter, and IP addresses for reverse-DNS names. Network ownership comes from our own copy of public data. |
| Open port check | Your own IP address | Receives connection attempts on the ports you choose. Nothing else is contacted. |
| DNS lookup | Cloudflare DNS (1.1.1.1) | Receives the names and addresses you look up. |
| DNS propagation | Public DNS resolvers: Cloudflare, Google, Quad9, OpenDNS, AdGuard, Control D, Mullvad, DNS.SB, AliDNS | Each receives the name you look up. |
| Nameserver check | Cloudflare DNS (1.1.1.1) | Receives the domain and its nameserver names. |
| Nameserver check | The domain’s own nameservers and its parent zone’s servers | Receive queries for the domain. |
| DNSSEC chain | Cloudflare DNS (1.1.1.1) | Receives the names being validated and their parent zones. |
| Email health | Cloudflare DNS (1.1.1.1) | Receives the domain and its email records (MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI). |
| Email health | The domain’s MTA-STS policy host (mta-sts.<domain>) | Receives a request for the policy file. |
| WHOIS / RDAP | IANA (data.iana.org) and the responsible registry, registrar or regional internet registry | Receive the domain, IP address or AS number you look up. |
| SSL certificate check | The site being checked | Receives a TLS connection from us. |
| SSL certificate check | Cert Spotter (SSLMate) and crt.sh | May receive the hostname, to find its logged certificates. |
| HTTP headers | The site at the URL you enter | Receives a request from us, as do any sites it redirects to. Checking your own headers contacts no one. |
| SEO & meta tag checker | The site you check | Receives a request from us for the page, as do any sites it redirects to. The preview loads the page’s own share image in your browser. |
| robots.txt tester | The site you check | Receives a request from us for its robots.txt. |
| Sitemap validator | The site you check | Receives requests from us for its robots.txt, sitemap and a sample of the pages it lists. |
4. Advertising
The Service shows ads from third-party ad networks. When an ad is shown, the ad network’s code runs in your browser and may set cookies or collect device and browsing information under that network’s own privacy policy. We don’t give ad networks any information about you or what you look up. We currently don’t show ads to visitors in the European Economic Area, the United Kingdom or Switzerland. See the Cookie Policy for how to control ad cookies.
5. Sharing and selling
We don’t sell or rent personal information, and we don’t share it for cross-context behavioral advertising. We disclose information only to the service providers described above, when required by law, or to protect the Service and its users.
6. Your choices and rights
You can ask us to access, correct or delete the contact-form messages you sent, or ask any other privacy question, through the contact form. Depending on where you live (for example under Virginia’s Consumer Data Protection Act, California law or the GDPR), you may have additional rights, including to appeal a decision about your request; we’ll honor applicable rights and respond within 30 days. Because we don’t store queries or IP addresses, there is usually nothing else of yours for us to return or delete.
7. Children
The Service is not directed to children under 13, and we don’t knowingly collect personal information from them. If you believe a child has sent us information, contact us and we’ll delete it.
8. Security
We use HTTPS everywhere, restrict the administration area with Cloudflare Access sign-in, and keep the information we hold to a minimum. No method of transmission or storage is completely secure.
9. Changes
We’ll update this policy when our practices change, and revise the effective date above.
10. Contact
NexaYori LLC, Virginia, United States. Reach us through the contact form.