Privacy Policy

1) Scope of This Policy

This policy applies to the IPIN.IO website, public IP tools, APIs, and the IPIN.IO IP Checker Chrome extension. Some website tools may process information supplied directly by the user, while the extension automatically processes the current public IP address and a limited set of browser and extension environment details.

2) Information We Process

Depending on the feature used, we may process the following categories of information:

• Public IP address used to provide the requested IP lookup.
• IP-derived location information, such as country, region, and city.
• Network information, such as ASN, network range, connection type, proxy, VPN, Tor, data-center indicators, and fraud or risk score.
• Extension installation identifier, randomly generated by the extension to distinguish one installation from another for request validation and security.
• Browser and device environment details, such as extension ID and version, browser language, operating-system platform, browser user agent, time zone, screen dimensions, device memory, processor-thread count, and related Chromium platform information.
• Security and request metadata, including timestamps, nonces, temporary request keys, signature-validation data, request status, and rate-limit counters.
• Short-term cached lookup results stored locally in the extension and, where necessary, temporarily on our server.

We do not intentionally collect names, postal addresses, email addresses, phone numbers, government identifiers, passwords, payment details, health information, browsing history, page content, or private messages through the Chrome extension.

3) How the Chrome Extension Uses Information

The IPIN.IO IP Checker extension has a single purpose: to display the user’s current public IP address and related network information. When the extension is opened, it may collect a limited set of browser-specific and extension environment details, combine them with a timestamp and random nonce, encrypt the resulting request, and send it to the IPIN.IO server.

The server decrypts and validates the request, stores the permitted security record in a single database table, and returns a short-lived request key. The extension then uses that key to request the current public IP details. The key is time-limited and is used only to authenticate extension requests and reduce unauthorized API use.

The extension does not allow the user to manually query arbitrary IP addresses. It only requests information for the public IP address from which the extension request reaches our server.

4) Local Storage and Caching

The extension uses Chrome’s local storage to save limited operational data, including:

• The latest IP lookup result and its cache expiration time.
• The temporary request key and its expiration time.
• The randomly generated installation identifier.
• The selected interface language and related display preferences.

Lookup results are normally cached for approximately 60 seconds to reduce unnecessary network requests and improve loading speed. Users may manually refresh the extension to request updated information. Removing the extension or clearing extension storage deletes the locally stored data.

5) Server Storage and Retention

For extension security and service operation, our server may store records containing the request-key token hash, extension ID, installation identifier, public IP address, hashed browser identifiers, encrypted session-key data, decrypted browser environment profile, nonce data, request counters, and short-term cached IP lookup results.

Temporary request keys are designed to expire after a limited period, currently approximately 10 minutes. IP lookup cache data is normally retained for approximately 60 seconds. Expired operational records may be retained for a limited period for security, abuse prevention, diagnostics, and service maintenance, and are periodically deleted when no longer needed.

Website tools that accept user-submitted IP addresses, proxy lists, or logs may process those inputs only for the requested operation. Where a feature explicitly states that data is not retained, we do not intentionally keep the submitted content after processing, except for unavoidable short-lived infrastructure or security records.

6) Why We Use the Information

• To display the user’s current public IP address and related IP intelligence.
• To provide country, region, city, ASN, connection type, proxy, VPN, Tor, data-center, and risk information.
• To verify that requests are consistent with the official Chrome extension environment.
• To issue and validate temporary request keys.
• To prevent replay attacks, abuse, automated scraping, and excessive requests.
• To provide short-term caching and improve extension performance.
• To diagnose errors, maintain reliability, and protect the security of the service.

We do not use extension data for personalized advertising, behavioral profiling, credit decisions, employment decisions, or unrelated marketing.

7) Chrome Permissions

The extension requests the storage permission to store the temporary request key, installation identifier, language preference, and short-term cache. It also requests host access to https://ipin.io/* so it can securely contact the official IPIN.IO API and load related resources, such as country flag images.

The extension does not use these permissions to read or modify unrelated websites, inspect browsing history, inject advertising, or collect page content.

8) Remote Code

The Chrome extension does not download or execute remote JavaScript, WebAssembly, or other executable code. All executable extension code is packaged with the extension. The extension communicates with the IPIN.IO service over HTTPS and receives JSON data used only for display and request validation.

9) Third-Party Services

IP lookup results may be obtained from third-party IP intelligence providers. To provide the requested lookup, the user’s current public IP address may be transmitted to those providers. Third-party providers may process network requests according to their own privacy policies, security practices, and retention rules.

We may also use hosting, content-delivery, DDoS-protection, database, and infrastructure providers. These providers may process limited network and operational data as necessary to deliver and protect the service.

10) Data Sharing and Sale

We do not sell, rent, or trade user data. We do not share user data with advertisers. Information may be shared only with service providers that are necessary to operate the IP lookup service, protect the infrastructure, comply with law, or investigate abuse and security incidents.

11) Security

We use HTTPS/TLS, encrypted bootstrap requests, short-lived request keys, HMAC signatures, timestamps, random nonces, request validation, database controls, and rate limiting to help protect the service. Sensitive server-side keys are not intentionally included in the published extension.

No method of internet transmission or storage is completely secure. Users should avoid submitting secrets, credentials, private keys, or other highly sensitive content through website tools.

12) User Choices and Data Deletion

Users can remove locally stored extension data by clearing extension storage or uninstalling the extension. To request information about server-side records or request deletion where legally applicable, contact us using the email address below. Because some operational identifiers are pseudonymous and not linked to a name or account, we may need additional information to identify the relevant record.

13) Children’s Privacy

The service is not designed to collect names, contact details, or other direct identifiers from children. We do not knowingly use extension data to create profiles of children or serve personalized advertising.

14) Legal Requests

We may disclose information when required by applicable law, court order, or valid legal process, or when reasonably necessary to protect the rights, safety, and security of users, IPIN.IO, or the public.

15) Changes to This Policy

We may update this policy when features, legal requirements, or data practices change. The revised version will be published on this page with an updated “Last Updated” date.

16) Contact Us

For privacy questions, requests, or concerns, contact: business@ipin.io. Operator: IPIN ChainLink Limited.