Privacy without the theatre.

Internet Passport is designed so that checking your privacy does not create a new privacy problem.

What happens when you scan

Your browser asks our server for a report. The server necessarily sees your public IP address, as every website does. Country and ASN metadata are resolved locally from DB-IP Lite data. We also send the address to ipapi.is to obtain probabilistic VPN, proxy, Tor, hosting-network, and reputation indicators.

What we store

We do not save your complete Passport result. We create a secret, one-way identifier from your IP for rate limiting and a short-lived metadata cache. The cache contains network classifications but not the raw IP address. Standard LiteSpeed/cPanel access logs may contain IP addresses and request details and are governed by the server's normal log rotation.

What stays in your browser

Browser privacy signals, WebRTC observations, score calculation, persona selection, roast text, and share-card generation happen locally in your browser. They are not submitted to our API.

Sharing

Share cards intentionally omit your full IP address, exact location, browser fingerprint, and network operator. Challenge links contain only a score and persona slug. Sharing is always initiated by you.

What we do not do

• No advertising pixels or behavioral analytics
• No account or email collection
• No sale of network data
• No port scanning
• No malware or vulnerability scanning
• No attempt to identify a person behind an IP

Accuracy

IP location and VPN/proxy classification can be wrong. Treat them as indicators, not proof. See the methodology for scoring details.

Data attribution

Country and ASN ranges use DB-IP Lite data under the Creative Commons Attribution 4.0 International License.

Changes

This policy is effective August 11, 2026. Material changes will be reflected on this page.