Privacy policy

Updated: 2026-10-28

prefixkit.com is a set of free network tools. This page explains what data is processed when you use them. We do not sell data and do not keep a history of your queries.

What runs in your browser

The subnet calculators, CIDR table, phone codes and phone number lookup work on your device. The pcap analyzer reads the file in your browser: it is never uploaded.

What goes to outside services

My IP and IP lookup: Cloudflare reads your IP address and connection details at the moment of the request. For extended details about an address (city, provider, VPN signals) our server asks IPinfo. Answers are cached for up to 7 days and are not linked to you.

WHOIS: the query (a domain, IP or AS number) goes to registries via rdap.org and is cached for a day.

DNS lookup and blacklist check: queries go from your browser to Cloudflare DNS-over-HTTPS (1.1.1.1). DNS propagation checks run on Globalping probes.

WebRTC leak test on My IP: your browser asks Google and Cloudflare STUN servers for its address. The result stays in your browser.

Speed test: by default your browser exchanges test data with Cloudflare speed test servers (speed.cloudflare.com), which see your IP as with any request. If you pick the M-Lab server, the test starts only when you press the button, and M-Lab publishes the result together with your IP address as open research data (privacy policy: measurementlab.net/privacy).

BGP and RPKI check: our server asks RIPEstat (RIPE NCC) open data about the address or prefix you enter. The SIP log analyzer runs only in your browser: the text is not sent anywhere.

SSL check: our server on Cloudflare opens the site over HTTP and HTTPS and reads certificate data from public Certificate Transparency logs (Cert Spotter, crt.sh). The CSR generator makes the key only in your browser.

AI explanation: only when you press the button, what you entered in the tool and the result it shows (in the analyzers, the problems found and the SIP message text) are sent to Cloudflare Workers AI. Passwords and private keys are removed first; the WireGuard and CSR key generators send nothing to AI. We do not store this data and Cloudflare does not use it to train models. The pcap file itself and the audio are never sent.

Port and SIP checks: our server on Cloudflare connects to the address you enter. We do not store what you checked.

Ping, traceroute and Is it down: the open Globalping network runs the check from your browser; it receives the address you test and, as with any request, your IP.

Statistics and advertising

We use Yandex Metrica to understand which tools are used. It sets cookies and processes anonymised visit data under Yandex’s rules.

The site may show ads from the Yandex Advertising Network and Google AdSense. Ad networks use cookies to choose ads. You can turn off personalisation in your browser or in your Google and Yandex accounts.

Some links are affiliate links: if you follow one and buy a service, we may earn a commission. It does not change your price.

Server logs

Cloudflare, which runs the site, processes technical request data (IP address, time, page address) to deliver and protect it. We do not link this data to individuals.

Contact

Questions about data: hello@prefixkit.com.