Privacy Policy

This policy applies to the website, accounts, IP intelligence, network tests, monitoring notifications, API, AI analysis and community services that GiantAccel, LLC (we, us or our) provides under the CleanIP name through cleanip.io. Personal information means information that identifies an individual on its own or in combination with other information. IP addresses, device identifiers and lookup records may constitute personal information in some circumstances.

CleanIP is operated by GiantAccel, LLC, a United States company. GiantAccel, LLC is responsible for the personal information processed through the site and determines the purposes and means of that processing. Questions about this policy and requests to exercise your rights can be sent to us using the contact details at the end.

Please read this policy before using relevant features, registering or submitting information. Third-party websites, sign-in platforms and independently provided services have their own privacy rules. Reading this policy or continuing to browse does not constitute consent to every processing activity. Separate notices or consent must be provided where required by applicable law.

Registration and account information

When you register, sign in or manage an account, we process your email address, account identifier, display name, avatar and settings. Password sign-in uses a password hash rather than a stored plaintext password. Third-party sign-in provides the identifier and profile details returned within your authorization. Sign-in times, IP addresses and browser details support session management and account security.

Lookups, tests and usage records

IP, domain, ASN and network tools process the targets and parameters you submit, test results and network information needed to connect to the service. Network or browser environment tests may involve public IP addresses, DNS, WebRTC, time zones and device or browser characteristics. Some records stay in browser storage; when signed in with history enabled, lookup records are also stored against your account.

Monitoring, subscriptions and API use

Monitoring and email subscriptions store your selected IP addresses, notification email, preferences and related test or alert records. API use involves key identifiers or digests, usage counts and request records for authentication, results and quota management.

Feedback, community and AI inputs

We process questions, corrections, contact details, posts, replies and attachments you submit. Community contributions may be public. AI reports and conversations use relevant IP intelligence, test results, questions and necessary conversation context to produce responses. Do not submit passwords, keys or sensitive personal information unrelated to your request.

Access, device and log information

Our servers and related services process IP addresses, access times, page or request addresses, referrers, browser and device types, response status and necessary security signals. Analytics tools may also process session identifiers, approximate location and page interactions, as described in the cookies and analytics section.

Information from other sources

We receive authorized profile information from third-party sign-in platforms. IP intelligence providers, network measurement services and public network registries supply ownership, risk and connectivity information about queried addresses, domains or networks. This may include publicly registered contact information; accuracy and availability depend on the original source.

We use this information to provide requested features: creating and verifying accounts, returning lookup and test results, synchronizing history, monitoring targets, sending verification and service notifications, providing API access, handling feedback and generating AI analysis. A feature may not work without its necessary information. You can choose not to register, subscribe or use features that require additional input.

We also use necessary access, device and usage information to investigate faults, assess performance, improve features, limit abuse, protect accounts and data sources, resolve disputes and meet applicable legal obligations. IP risk scores and AI interpretations are automated analyses of network intelligence, not definitive judgments about an individual's identity, creditworthiness or conduct.

Our basis for processing depends on the purpose and applicable law: providing services you request, meeting legal obligations and, where permitted, legitimate interests in securing and improving the service. Where consent is legally required, appropriate consent must be obtained. You can request withdrawal or exercise other rights as described below. Reading this policy alone does not provide additional authorization.

We use cookies and browser storage to maintain sessions, remember preferences, retain recent lookup or test state and record whether you have read the privacy notice. Necessary session storage serves a different purpose from optional analytics. Blocking all storage may prevent sign-in or other features from working.

We use Google Analytics 4 (GA4) to understand traffic, page usage and product performance. It may use first-party cookies to distinguish browsers and sessions, and process page addresses, referrers, browser and device details, approximate location and interactions. We also use Umami and Cloudflare Web Analytics for traffic or performance measurement. A queried IP included in a page address may enter analytics records with that page visit. Analytics is therefore not necessarily fully anonymous, and lookup-related information does not always remain solely on your device.

As of this policy's update, we do not run Google Ads campaigns. Using Google Analytics for measurement is distinct from advertising through Google Ads. The site may display directly managed sponsored or advertising content, which does not itself mean we use Google advertising services. Google's handling of information it receives also depends on its terms, privacy policy and relevant settings.

You can clear cookies and site data, restrict scripts through your browser, or install the Google Analytics opt-out add-on in supported browsers. Clearing local data or using private browsing does not delete server records or necessarily prevent future measurement. The current privacy notice's acknowledgment button only dismisses the notice; it does not enable or disable analytics.

Live visitor map on the Global Network Pulse page: while you browse this site, your browser sends an anonymous heartbeat about every 30 seconds (and once when you leave a page). It contains a random visitor ID generated in your browser, the start time and count of your visits, the current page path, the first external referrer domain, and your operating system, browser and device type. The server uses your exit IP to look up your city, network type and CleanIP score in local databases, and that page shows you anonymously with a cartoon avatar and a random name. IPs are never displayed, locations stay at city level and IP lookup paths are masked. This data is kept only in an in-memory cache and is deleted after about 30 minutes of inactivity. No heartbeat is sent when Global Privacy Control (GPC) or Do Not Track (DNT) is enabled.

Infrastructure and support

Hosting, content delivery, security and email providers may process necessary request logs, network information or recipient addresses to support the service. Infrastructure providers such as Cloudflare participate in delivery, performance measurement or security. This processing can occur without an account.

Queries, measurements and AI

Query targets may be sent to relevant IP intelligence or network data providers. Measurements, maps and other third-party resources requested directly by your browser may also expose your connection IP and device request information to those providers. AI analysis currently uses DeepSeek; relevant query data, questions and necessary context are sent to that service to generate results. Provider retention and processing are governed by their policies and service arrangements.

Third-party sign-in and analytics

Third-party sign-in connects your browser to the selected identity platform. Analytics providers, including Google Analytics, receive the access information disclosed in this policy. Providers may process information independently according to their roles; please also review their privacy policies.

Public contributions and other disclosures

Community posts, replies, attachments and displayed author information may be viewed, copied or redistributed by others. Avoid publishing sensitive information about yourself or others. Where supported by applicable law, we may disclose necessary information in response to lawful requests, to resolve disputes or to protect the service and its users. A business transfer would be subject to applicable notice and protection requirements.

No sale of personal information

We do not sell your personal information or lookup records to advertising networks or data brokers. Necessary transfers to providers for the services described here, and content you choose to publish, differ from selling data. This does not mean that no third party processes information during service delivery.

CleanIP uses servers, edge networks and third-party services. Information may be stored or processed outside your country or region, including in locations used for analytics, sign-in, lookup and AI infrastructure. Privacy protections differ between jurisdictions.

International processing must meet applicable legal requirements, including any required notices, consent or safeguards. You can contact us for information about processing locations, recipients and safeguards relevant to the features you use. This policy does not represent that all information stays in one country or region.

Account information supports the service while your account exists. Account lookup history is managed according to the retention period shown for your current plan and your history settings. Monitoring, subscription and notification records are retained for their operational purposes. You can disable history, clear relevant records, remove monitors or unsubscribe; disabling a feature does not necessarily erase all existing records.

Retention of access and security logs, temporary tokens, query caches and analytics varies by purpose and configuration. The criteria are the time needed to provide services, investigate faults, address security incidents or disputes, and applicable statutory periods. There is no single retention period for every category. Browser data generally remains until it expires or you clear it; independently held third-party records follow the provider's rules.

Deleting your account removes the account and linked sign-in identities, sessions, account history, API keys and associated monitoring subscriptions. Published community content may remain after account deletion. Contact us separately about posts, attachments or other identifying information. Backups, security records or information subject to legal retention requirements may not disappear immediately; further retention and deletion depend on the applicable requirements and purposes.

We use measures appropriate to service risks, including encrypted transport, session controls, password hashing, access restrictions and rate limiting, to reduce unauthorized access, disclosure and abuse. Protect your sign-in credentials, email account and API keys, and do not disclose them in public feedback or community posts.

No transmission or storage method is completely secure. Contact us promptly if you suspect account misuse or a data breach. We will investigate and take appropriate action, including incident notification where required by applicable law.

Access, correction and copies

You can view or edit supported details in your account, or contact us to ask about processing, correct inaccurate information or obtain a copy. Where applicable law provides a right to data portability, you may request it.

Deletion, account closure and subscriptions

Use account controls to clear history, remove monitors or close your account, or follow notification emails to unsubscribe. Contact us if self-service is unavailable or you need help with feedback, community content or other records. Deletion may be limited by legal retention obligations or the legitimate rights of others.

Withdrawal, restriction and objection

For consent-based processing, you may request withdrawal without affecting earlier processing based on valid consent. Applicable law may also provide rights to restrict or object to processing, particularly processing based on legitimate interests. Existing analytics and storage controls are described above; dismissing the privacy notice does not stop analytics scripts.

Verification and complaints

We may need to verify your identity and the relevant records to prevent unauthorized access or deletion. Requests will be handled within applicable legal time limits. If we cannot meet a request, we will explain the relevant reasons. You can contact us to challenge the outcome or complain to a competent privacy or regulatory authority where permitted by law.

The service is not designed specifically for children. Minors should use it with guidance from a parent or guardian, and parental consent must be obtained where required for processing. If you believe a minor has provided personal information without appropriate authorization, contact us so we can investigate and address it.

We may update this policy when features, processing practices or applicable requirements change, and will revise the date on this page. For changes that materially affect your rights, we will provide an appropriate notice as required, such as an on-site notification. Where renewed consent is required, a page update or continued use does not replace it.

For questions about this policy, personal information or exercising your rights, contact us (GiantAccel, LLC) at the privacy email below. General product questions can also be submitted through the feedback page.

Describe the feature, relevant records and your specific request, and provide necessary contact information. Do not send passwords, verification codes, full API keys or unrelated identity documents. If further verification is needed, we will explain why and what is required.