Privacy

CGNAT.wtf is a small reference site about home internet providers. This page lists everything the site stores or sees about visitors, and why. Last updated October 18, 2026.

Reading the site

• No ads and no tracking cookies. The site sets no cookies of its own.
• We count page views with our hosting provider's privacy-focused analytics, which is cookie-free and doesn't track individual visitors.
• Like any website, our hosting provider sees your IP address when your browser connects. It keeps short-lived technical logs of requests to the site's API (the forms and the checker) for up to 7 days, for debugging and abuse prevention. We don't copy those logs anywhere.

Forms

• All forms use a privacy-friendly bot check from our hosting provider to block spam. It loads only once you start filling in a form.
• ISP reports (submit a report) store what you type, your browser's user agent and a salted, one-way hash of your IP address to catch abuse. We never store the raw IP address. ZIP codes are cut to the first three digits.
• Newsletter signups store your email address and a salted, one-way hash of your IP address to catch abuse. Your address is used only for the newsletter, never shown on the site or shared. To be removed, send a "Privacy request" through the contact form.
• The contact form stores your topic, your message, the reply email if you choose to give one, your browser's user agent and a salted, one-way hash of your IP address to catch abuse. Messages are read by hand. A reply email is used only to answer that message: it's never shown on the site, shared or added to the newsletter.
• To stop floods of submissions, each connection can send only a few reports, signups or messages in a short time. The report and newsletter limits are counted for one minute by our hosting provider's rate-limiting feature. The contact form limit is counted for 10 minutes in our database. Both use only the salted, one-way hash of your IP address, never the address itself.

The checker

• The checker looks up your public IP through this site's own server, plus the reverse-DNS name of your IPv4 address through our hosting provider's own DNS resolver. It shows you the result and doesn't save your IP address.
• The optional port test tries a plain connection back to your own public IPv4 on up to 3 ports you pick, after a bot check. It can't be pointed at any other address. Your IP address and the results are never saved. To limit each connection to 6 tests per 10 minutes, we keep a salted, one-way hash of your IP address for up to a day, then delete it.
• The optional NAT type test runs in your browser and contacts two public STUN servers run by a third party, which see your IP address the way any server you connect to does.
• The report's share link carries only coarse results (no IP address) after the # in the link, which browsers don't send to any server.

About the "salted, one-way hash"

Instead of your IP address we store a scrambled code made from it plus a secret value. The code can't be turned back into your IP address. It only lets us tell that two submissions came from the same connection.

Your choices

• To have a report, a newsletter signup or a contact message deleted, send a "Privacy request" through the contact form.
• We don't sell or share what you send us, and we don't use it for advertising.

Questions: use the contact form. We don't publish an email address.