Skip to content
MtrXTools

Privacy policy

Effective 4 November 2026

Who we are

MtrXTools (“MtrXTools”, “we”, “us”) runs the network diagnostic tools at mtrxtools.com. This policy explains what information is processed when you use the site, why, and the choices you have. Questions or requests: privacy@mtrxtools.com.

The short version

  • You don't need an account, and we don't ask for your name. The feedback form asks for an email address only if you want a reply.
  • What you type into a tool is used to run that check and is not saved in a database.
  • Your recent runs, theme and cookie choice stay in your own browser.
  • Google Analytics runs only if you accept analytics cookies, and never receives what you typed.
  • Cloudflare Web Analytics and Vercel Web Analytics count visits without cookies.
  • Pages show ads from Google AdSense. Google may use cookies to show and measure them; in the EEA, UK and Switzerland it asks for your consent first. What you type into a tool is never shared with advertisers.
  • We don't sell your information.

Information we process

What you enter into a tool. Domains, IP addresses, URLs, ports and email addresses (for the SPF/DKIM/DMARC check) are sent to our servers so we can run the check. We connect to the target and to the services listed below, show you the result, and don't keep it. The same applies to requests made through our API. Shareable result links contain the target in the address, so anyone you share a link with can see it.

Technical data. Like any website, our hosting provider (Vercel) and the network in front of it (Cloudflare) receive your IP address, browser type and the time and address of each request. They use it to deliver the site, keep it secure and investigate errors, and keep it only briefly in their logs. Cloudflare also tells our server which country you appear to be in. We also count requests per IP address (IPv6 addresses grouped by network) for about two minutes to apply rate limits that stop abuse.

What's my IP. This tool shows the address you connect from. Your browser asks ipify (api4.ipify.org and api6.ipify.org) for your IPv4 and IPv6 addresses, and our server looks up the network and approximate location of those addresses.

Tools that run only in your browser. The email header analyser, subnet calculator, network planner, error explainer and DMARC report analyser never send what you paste or upload to us or anyone else. In the DMARC analyser, “Identify senders” sends only the sending IP addresses to our server, and only when you press it.

Status badges and calendar feeds. Badge and calendar addresses contain the domains you chose. Anyone you share them with, and the services that fetch them for you (such as GitHub's image proxy or your calendar app), see those addresses. We check the domains when the badge or feed is requested and don't store them.

Feedback form. When you send feedback we receive the category you chose, your message, your email address if you give one, the page you were on if you leave that box ticked, your browser type and your country (estimated from your IP address by Cloudflare or our hosting provider). It reaches us as an email sent through Resend, our email delivery provider, and we keep it only as long as we need to act on it and reply. We don't add your address to any list. To stop automated spam, the form uses Cloudflare Turnstile, which checks that a person is sending it; it sets no tracking cookies and Cloudflare processes your IP address and browser signals only for that check. The check loads only when you open the form.

Storage in your browser. We keep your recent runs, theme and cookie choice in your browser's local storage. They are not sent to us; use “Clear” under Recent runs or your browser settings to remove them.

Analytics cookies (only with your consent). If you accept, we load Google Analytics 4, which sets cookies (_ga, _ga_*, kept for up to two years) to count visits and see which pages are used. We send page addresses without their query string, so the domains, addresses and emails you enter are not shared with Google. Google Analytics 4 doesn't log or store IP addresses; Google may use them briefly to estimate a country or city. Advertising features are turned off.

Cookieless visit counts. We use Cloudflare Web Analytics to count visits and page loads and to measure how fast pages load. It sets no cookies, doesn't use your browser's storage, and doesn't fingerprint your device or follow you across sites. Your browser sends the page address, referrer, browser type and timing data to Cloudflare, which sees your IP address as part of the connection but doesn't use it to identify you. We also use Vercel Web Analytics and Speed Insights, from our hosting provider, to count page views and measure how fast pages load for real visitors. They set no cookies either: a visit is recognised by a hash of the request that resets every day, and we send page addresses without their query string, so what you type into a tool isn't included.

Advertising. We show ads served by Google AdSense, which pays for the free tools. Google and its partners may use cookies and similar technologies to show ads, limit how often you see the same ad, measure performance and detect fraud, and, where you allow it, to show ads based on your visits to this and other websites. Your browser sends Google the page address, your IP address and browser details when an ad loads. Visitors in the European Economic Area, the UK and Switzerland see Google's consent message first and can choose personalised ads, non-personalised ads or decline; outside those regions you can opt out of personalised ads at adssettings.google.com. Tool results and what you type into a tool are not shared with Google for advertising. Google explains how it uses data from sites that show its ads at policies.google.com/technologies/partner-sites.

Services involved in running the tools

To produce results we, or your browser, contact the following. They receive what is needed for the check, usually the domain or IP address being looked up; services your browser contacts directly also see your IP address.

  • The hosts you ask us to test (we connect to them from our servers, never from your device).
  • Public DNS resolvers: Cloudflare, Google, Quad9 and OpenDNS.
  • IANA and the domain and IP registries and registrars that publish RDAP and WHOIS records.
  • Team Cymru, for the network (ASN) an IP address belongs to.
  • ipwho.is, for the approximate location of an IP address being looked up.
  • ipify, contacted by your browser on What's my IP.
  • The published IP range lists of cloud and CDN providers (AWS, Microsoft, Google, Cloudflare, Fastly, GitHub, Oracle, DigitalOcean, Linode), which our server downloads; nothing about you is sent to them.
  • Vercel, which hosts the site and provides cookieless visit counts and page speed measurements (Vercel Web Analytics and Speed Insights), and a rate-limiting store when one is configured.
  • Google, for Google Analytics (only if you consent) and for the ads shown by Google AdSense.
  • Cloudflare, which sits in front of the site to deliver and protect it, and provides cookieless visit counts (Cloudflare Web Analytics) and the feedback form's human check (Turnstile).
  • Resend, which delivers feedback form messages to our inbox.

Why we process it (legal bases)

Where data protection laws such as the GDPR and UK GDPR apply, we rely on our legitimate interests to provide the tools you request, read and answer feedback you send, keep the service secure and prevent abuse, and on your consent for analytics cookies and, where the law requires it, for advertising cookies (given through Google's consent message). You can withdraw analytics consent at any time with “Cookie settings” at the bottom of every page, and change your advertising choice with the privacy and cookie settings link Google's consent message adds to the page; this doesn't affect processing that happened before.

How long we keep it

Tool results are not stored. Feedback emails are kept only as long as needed to act on them and reply. Rate-limit counters expire within about two minutes. Hosting logs are kept only as long as our provider retains them for operations and security. Analytics data is kept for the period set in Google Analytics (no longer than 14 months). Browser storage stays until you clear it.

International transfers

Our providers may process data in the United States and other countries. Where required, transfers rely on safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Your rights

Depending on where you live, you may have the right to access, correct or delete personal information, to object to or restrict processing, to data portability, and to complain to your data protection authority. Because we don't ask who you are, we usually hold nothing we can link to you, but contact us at privacy@mtrxtools.com and we will help.

We don't sell personal information or share it for cross-context behavioural advertising (as defined in California law). If your browser sends a Global Privacy Control signal, we treat it as a refusal of analytics cookies.

Children

MtrXTools is not directed at children under 16, and we don't knowingly collect their personal information.

Security

The site is served only over HTTPS. Our servers refuse to probe private or internal networks, limit how fast tools can be used, and keep as little data as possible. No method of transmission or storage is completely secure, but we work to protect the information we handle.

Third-party content

Results include data from registries, DNS operators and other public sources. That data, third-party trademarks, and the open-source software MtrXTools is built with belong to their respective owners and are used under their terms.

Changes to this policy

We may update this policy as the tools change. The effective date above shows the latest version; significant changes will be highlighted on the site.

Contact

Email privacy@mtrxtools.com with any privacy question or request.