Privacy Policy

Who is responsible

NetTools is operated by Georgton and published at tools.georgton.com. For the purposes of the Brazilian LGPD (Law 13.709/2018) and the GDPR, that operator is the data controller.

Tools that never send your data anywhere

The Subnet Calculator and the Password Generator run entirely in your browser. Nothing you type into them is transmitted, logged or stored on any server.

Generated passwords are produced locally with the browser cryptographic API and never leave your device. We could not read them even if we wanted to.

Tools that query an external service

• What Is My IP — your browser asks api4.ipify.org and api6.ipify.org for your public addresses directly, one for each IP version. The requests do not pass through our servers and we do not record the result.
• IP Geolocation — the IP address you look up is sent to our backend and forwarded to ip-api.com. The answer is held in server memory for one hour so a repeated lookup does not hit the provider again.
• DNS Lookup — the domain you look up is sent to our backend and forwarded to Google Public DNS (dns.google). The answer is held in server memory for five minutes.

These caches live in the running process memory only. They are not written to disk, not backed up, and are lost whenever the service restarts. They are keyed by the IP or domain queried, not by who queried it.

Data collected automatically

• Google Analytics 4 — measures page views, approximate location, device and traffic source. Google processes your IP address to derive that approximate location; GA4 does not store the IP address itself.
• Cloudflare — sits in front of the site, terminates the connection and keeps security logs to block abuse and attacks. It also collects page performance metrics.
• Rate limiting — to stop one client from exhausting the API, the requesting IP address is held in server memory for at most one minute and then discarded. It is never written to disk.

Cookies and local storage

• Google Analytics cookies (_ga, _ga_*) — distinguish visitors and sessions for measurement.
• Cloudflare cookies (__cf_bm, cf_clearance) — separate humans from bots and remember that a security check was passed.

The site stores nothing of its own in your browser. Your language is part of the address you are reading — /en for English — so there is no preference to keep.

The site loads no advertising and runs no advertising cookies. Web fonts are served from our own domain rather than Google Fonts, so simply loading a page does not disclose your IP address to a font provider.

Legal basis

Operating the tools and protecting them against abuse rests on legitimate interest (LGPD art. 7, IX; GDPR art. 6(1)(f)). Audience measurement rests on consent, which you can withdraw at any time by the means described below.

Third parties involved

• Google (Analytics and Public DNS) — measurement and DNS resolution.
• Cloudflare — CDN, TLS termination and protection against attacks.
• ip-api.com — IP geolocation data.
• ipify.org — returns your public IPv4 and IPv6 addresses to your browser.
• OpenStreetMap — renders the map shown alongside a geolocation result.
• Google Maps — only reached if you click the link that opens a geolocation result there. Nothing is sent to Google Maps until you click it.

These providers operate servers outside Brazil, so using the site involves an international transfer of data. We do not sell data and we do not share it with anyone beyond the providers listed here.

Retention

We keep no user database. The only retention on our side is the in-memory caching described above: one hour for geolocation, five minutes for DNS, one minute for rate limiting. Retention at Google and Cloudflare follows their own policies.

Your rights

Under the LGPD you may request confirmation that processing exists, access, correction, anonymisation, portability or deletion of your data, information about with whom it was shared, and withdrawal of consent. The GDPR grants equivalent rights.

One honest caveat: because there is no account and no user database, we usually cannot connect any stored value to a person. A request to delete data will normally find nothing on our side to delete. For data held by Google or Cloudflare, those requests must be made to them.

Turning off measurement

You can install the Google Analytics opt-out browser add-on, or use any content blocker. Blocking analytics does not degrade any tool on this site — every tool works with it disabled.

Security

The site is served only over HTTPS with TLS 1.2 or newer, sends HSTS, and applies a Content Security Policy restricting where scripts and other resources may load from. The API is rate limited. No system is perfectly secure, and we do not claim otherwise.

Children

These tools are aimed at network and systems professionals. We do not knowingly collect data from children.

Changes to this policy

If this policy changes, the date at the top of the page changes with it. Material changes will be described here rather than applied silently.