longest/match
LookupCountriesOperatorsNetworksVPN providersAPI

Privacy

Last updated 22 August 2026

This site records the requests made to it, including the IP address the request came from. It sets no cookies, runs no third-party analytics and shows no advertising. This page says exactly what is kept, why, and for how long.

Who is responsible

This site is run by a private individual in the Netherlands. For anything on this page, including any request about your own data, write to [email protected].

Under the GDPR that person is the controller for the data described here. There is no data protection officer, because the scale of this processing does not require one.

What is recorded when you visit

Every request to this site writes one row to a log. That row contains:

  • the date and time, the path requested, the HTTP method, the response status and how long the response took
  • your IP address
  • the Referer, User-Agent and Accept-Language headers your browser sent
  • the Sec-Fetch-* headers, which say whether a request was a page you opened or a background request made by the page
  • your platform (for example "Windows"), where your browser reports it
  • the HTTP version, and the DNT and Sec-GPC headers if you send them
  • an internal reference to the API key used, if the request used one

Requests for the health check and for static files such as stylesheets and fonts are not logged.

Why

Two purposes. The first is keeping the site working and dealing with abuse: finding what broke, seeing which requests are automated, and investigating attempts to overload or misuse the service. The second is understanding how the site is used, which pages people reach and where they arrive from, so the site can be improved.

The lawful basis is legitimate interests, Article 6(1)(f) GDPR. The interest is running a service that stays available and correct and knowing whether it is useful. Against that: no profiles are built, nothing is combined with data from anywhere else, nothing is sold or shared for marketing, and no attempt is made to identify anyone.

You can object to this processing at any time on grounds relating to your situation. Write to [email protected].

Other things that hold your address briefly

WhatWhyKept for
Request logSecurity, abuse handling and site analytics400 days
Rate limit counterEnforcing the request limits, keyed to your addressAbout 25 hours
Lookup cacheAvoiding recomputing the same answer. Keyed to the address looked up, which is your own address when you use the "what is my IP" feature. 1 hour
Registry lookup cacheResults of optional live registry queries7 days

Each of these is deleted automatically. Nothing here depends on anyone remembering to run a clean-up.

Cookies

This site sets no cookies. Your browser stores one value locally: whether you chose the light or dark theme. That value never leaves your browser, is not sent to the server, and is not used to recognise you. You can clear it through your browser at any time.

Who else handles your data

The site runs on hardware operated by the site owner in the Netherlands. Traffic reaches it through Cloudflare, which provides the connection and protects against attack. Cloudflare therefore processes your request, including your IP address, on the way through, and acts as a processor under a data processing agreement. Cloudflare is a United States company with EU infrastructure, so some processing may take place outside the EEA under the safeguards in Chapter V GDPR.

Nobody else receives this data. It is not sold, rented or shared for advertising.

Your rights

You can ask for a copy of the data held about you, ask for it to be corrected or deleted, ask for its use to be restricted, object to it being processed, and ask to receive it in a portable form. Write to [email protected].

One practical limit worth stating honestly: the request log is indexed by time, not by person. To find your entries, the address you used has to be known, and after 400 days nothing remains to find. If you want your entries removed, tell us the address and the approximate dates.

If you are unhappy with how this is handled you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority where you live.

The addresses in the lookup database

Separately from the logs, this site publishes information about IP addresses and networks generally: which network an address belongs to, the organisation a block is registered to, the country it appears to be in, and whether public lists describe it as VPN, proxy or datacenter space. An IP address can be personal data, so this deserves saying plainly.

That information comes from public and licensed sources: the regional internet registries, published network operator data, commercial and open geolocation datasets, and published lists of VPN, proxy and datacenter address ranges. It describes address blocks and the organisations that hold them. It does not name individuals, and the registry data used has personal records already removed by the registries themselves.

No attempt is made to link an address to a person. Geolocation is an estimate for a block of addresses with a stated accuracy radius, and never a fix on a device or a household.

The site does not contact the holders of every address it describes, because there are billions of them and no way to reach them. GDPR allows this where notice would require disproportionate effort, and this page is the public notice that takes its place. If you hold an address or a network and want its entry corrected or removed, write to [email protected] and say which block you control.

Scores and automated processing

Lookup results include two computed indicators, one for reported abuse and one for origin concealment. They summarise what public sources say about an address block. They are not decisions about a person, they produce no legal or similarly significant effect, and nothing on this site decides anything about anyone. Whoever reads a result decides what to do with it.

Children

This is a technical reference tool. It is not directed at children and asks for no information about age.

Changes

If what is collected or how long it is kept changes, this page changes with it and the date at the top moves. There is no account to notify, so checking this page is the way to see the current position.

Longest Match. IP geolocation and network intelligence. This product includes GeoLite2 data created by MaxMind, available from maxmind.com.
CountriesOperatorsNetworksVPN providersAPI Privacy Terms