Last updated: November 5, 2026
WhoAmIOnline.com (“WhoAmI”, “we”, “us”) provides free, browser-based network and privacy diagnostic tools. This policy explains what information is involved when you use the site, how it is used, and the choices you have. We built WhoAmI to show you what your browser reveals — so keeping your data to a minimum is the whole point.
The short version
- Most tests run in your own browser. Your results are stored locally on your device, not in an account on our servers.
- To show your location and network, the site looks up your public IP address using trusted third-party services.
- We use analytics to understand traffic, and we may show ads (Google AdSense) and affiliate links (Amazon) to keep the site free. These use cookies.
- We do not sell your personal information.
Information we and our tools handle
Your IP address and connection details
Several tests need your public IP address to work (for example, to show your approximate location, your internet provider, and whether a VPN or proxy is detected). To do this, your browser and our server may query third-party IP-geolocation services such as Cloudflare, ipapi.co, and ipwho.is. We use this information to display your results in real time. Your web host also records standard server logs (including IP address and browser type) as part of normal operation and security.
Test results stored on your device
Your diagnostic results and overall “Report Card” are saved in your browser’s local storage so your scores persist as you move around the site. This data stays on your device. You can clear it at any time by clearing your browser’s site data for whoamionline.com.
Information you send us
If you use our contact form, we receive the name, email address, and message you submit, so we can respond to you. We use that information only to reply and to keep a record of the conversation.
Anonymized browser-uniqueness statistics
When you run the fingerprint test, your browser sends us a single hashed value derived from its fingerprint (such as its canvas, WebGL, font, screen, and user-agent signals) so we can show how unique your browser is compared with other visitors. We store only a salted, one-way hash of that value together with a count — never your IP address, the underlying fingerprint, or any personal data. The salt means a stored value cannot be matched back to a recomputed fingerprint, and we cannot use it to identify you.
Cookies and similar technologies
WhoAmI and our third-party partners use cookies and similar technologies for analytics and advertising. You can control cookies through your browser settings, and you can opt out of personalized advertising as described below.
Analytics — Google Analytics
We use Google Analytics 4 to understand how the site is used in aggregate — for example, which pages are visited and roughly where visitors come from. Google Analytics sets cookies and collects usage data (such as pages viewed, device and browser type, and approximate, IP-based location), and processes it under Google’s Privacy Policy. We do not use it to identify you personally. You can opt out of Google Analytics on all sites by installing the Google Analytics Opt-out Browser Add-on, or by blocking cookies in your browser.
Advertising — Google AdSense
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
- Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
- You may opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of a third-party vendor’s use of cookies for personalized advertising at aboutads.info.
- For more information on how Google uses data, see How Google uses information from sites that use its services.
Affiliate links — Amazon Associates
Some pages contain affiliate links, including Amazon Associates links. If you click one and make a purchase, we may earn a commission at no extra cost to you. As an Amazon Associate, WhoAmI earns from qualifying purchases. Clicking an affiliate link may set cookies controlled by the retailer.
How we use information
- To run the diagnostic tests you request and display your results.
- To operate, secure, and improve the site.
- To respond to messages you send us.
- To show advertising and affiliate recommendations that keep the site free.
Sharing
We do not sell your personal information. Information is processed by the third-party services described above (IP-geolocation providers, analytics, Google AdSense, and Amazon) under their own privacy policies. We may disclose information if required by law.
Your choices
- Ads: opt out of personalized ads at Google Ads Settings and aboutads.info.
- Local data: clear your saved results by clearing site data for whoamionline.com in your browser.
- Cookies: block or delete cookies in your browser settings. Some features may not work without them.
- Do Not Track: we honor your browser’s privacy choices where feasible.
Children
WhoAmI is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal information.
Data security
The site is served over HTTPS. While no method of transmission or storage is completely secure, we take reasonable measures to protect information handled by the site.
Changes to this policy
We may update this policy from time to time. We will revise the “Last updated” date above when we do.
Contact
Questions about this policy? Reach us through our contact page.
What this site loads
We keep the third-party footprint small and privacy-first. Here is everything this site loads, and why:
- Google Analytics — anonymous visit counts and which fixes people read. IP anonymization is on and advertising features are off. You can turn analytics off from the notice at the bottom of the page; your choice is remembered.
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — the site’s typefaces.
- Cloudflare speed endpoints (speed.cloudflare.com) — the download and upload speed test.
- Public lookup APIs used by the tests, each called only when you run the relevant test: 1.1.1.1 and dns.google (DNS checks), api.github.com and en.wikipedia.org (latency probes), v6.ipv6-test.com (IPv6 reachability), ipapi.co and ipwho.is (IP and location lookup), and api.pwnedpasswords.com (email breach check — uses k-anonymity, so your full email is never sent).
- AdSense verification tag — a Google AdSense publisher tag is present on the pages for verification only. No ads are served today; if that changes, the notice above will change first.
Shared report links (/r/…): when you choose to create a share link, we store only your coarse letter grades and yes/no flags. We never store your IP address, exact speeds, location, ISP name or device details. Share links expire after 90 days.