Privacy Policy

Who is responsible

MyIPLocation is a product of Xeviora. The operator of Xeviora, identified in our Terms of Service, is the controller of the personal data described in this policy. Contact: support@xeviora.com

What we collect

• Your IP address and browser details — to show you your own IP, its approximate location and your user agent, which is the core purpose of the site.
• Lookups you run — the IP addresses, domains, hostnames, URLs and email headers you enter into our tools. If you are signed in, a history of your IP, DNS, proxy and checkup lookups is saved to your account.
• Account data — your email address, name and a securely hashed password, or the basic profile (name, email, avatar) that Google or GitHub shares with us if you choose to sign in with them; API keys you create (stored hashed).
• Plan and usage records — your plan, subscription status, daily usage counts and the Paddle customer and subscription identifiers linked to your account.
• Log data — IP address, browser type, pages visited and the time of your visit, recorded by our hosting provider to operate and secure the service.
• Cookies and local storage — a session cookie to keep you signed in, your theme, language and cookie-consent choices, and cookies set by the analytics and advertising services listed below.

We use this data to provide and secure the service, to answer support requests and to meet legal obligations. We do not sell your personal data.

Payment processing

Payments are processed by our reseller and Merchant of Record, Paddle.com ("Paddle"). Paddle collects and processes your payment and billing information (such as name, email, billing address, country and payment details) as an independent data controller in order to process your order, calculate taxes, prevent fraud and meet its legal obligations. We never receive or store your full card details. We receive limited order information from Paddle (such as your email, country, plan and transaction status) to provide the service. See Paddle's Privacy Notice: https://www.paddle.com/legal/privacy.

AI processing

To provide the AI network privacy checkup, a snapshot of the network data for the IP being checked (approximate location, network owner, reverse DNS, proxy/VPN/Tor signals and browser details) is sent to our AI service providers (OpenRouter and the model providers it routes to) for processing. We do not use your content to train models, and our providers process it only to return results to you.

Service providers

• Vercel — website hosting and server functions.
• Neon — managed PostgreSQL database for accounts, history and subscription records.
• Our geolocation server — a server we operate that answers IP location queries from GeoLite2 data by MaxMind; lookups are not sent to MaxMind.
• Resend — sends account emails such as email verification.
• Google and GitHub — optional sign-in, used when you choose it.
• OpenRouter (and the model providers it routes to) — AI processing, as described above.
• Google Analytics and Google AdSense — website analytics and advertising; these services may set cookies and receive your IP address and browser information. Google Analytics loads only after you accept cookies.
• Google Maps and Google Programmable Search — display maps for a looked-up location and power site search; your browser connects to Google when these features are shown.
• Network services queried by our tools — when you run a DNS, WHOIS or blacklist check or an HTTP header check, the domain, IP or URL you entered is sent to the relevant public DNS resolvers, WHOIS servers, DNS blocklist operators or website.
• Paddle — payments, as an independent controller (see above).

Retention

We keep account data and lookup history while your account is open. If you ask us to delete your account, we delete your personal data except where we must keep limited records (for example, transaction records) to meet legal obligations.

Your rights

Depending on where you live, you can ask us to access, correct, delete or export your personal data, and you can object to or restrict certain processing or withdraw consent. To exercise these rights, email support@xeviora.com. You also have the right to complain to your local data protection supervisory authority. You can change your cookie choice at any time by clearing this site's cookies in your browser.

Children

MyIPLocation is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

International transfers

Our service providers may process data in countries other than your own. Where required, they rely on appropriate safeguards such as standard contractual clauses.

Changes

We may update this policy. We will post the new version here with a new date and, for material changes, notify you by email or in the product.