Last updated: June 29, 2026
When you create an account, we collect your email address and name. IPCraft is passwordless — we never collect or store passwords. If you sign in with Google, we receive your name, email address, and Google account identifier from Google. When you use the application, we store the network data you enter (subnets, IP addresses, and related metadata). We also collect standard server logs (IP addresses, timestamps, URLs accessed) for security and debugging.
Your data is stored on servers in Ashburn, Virginia (USA), hosted by Hetzner Cloud. All data is encrypted in transit via TLS. Database access is restricted to the application through row-level security policies that ensure complete isolation between organizations.
We share limited personal data with the following service providers, only as needed to operate IPCraft:
Your data is retained as long as your account is active. If you delete your account, we will delete all associated data within 30 days. Database backups containing your data are retained for 7 days after deletion.
You can export your data at any time via CSV export. You can delete your account at any time from your account settings, which permanently removes your data, or request deletion by contacting us. We will comply with applicable data protection regulations.
We use an essential session cookie (HttpOnly, Secure, SameSite=Lax) to keep you logged in, plus a short-lived state cookie during Google sign-in. We do not use tracking or advertising cookies, and we run no third-party analytics. Some providers we rely on — such as Cloudflare and Google Maps (on the Locations page) — may set their own functional cookies.
For privacy-related questions, contact us at [email protected].