Privacy Policy history

Every version of our Privacy Policy, with what changed.

When we change our Privacy Policy, we update the document and record the date here. Each entry below says what changed and links to the full text as it was published, so you can read the version that applied at any given time.

Archived versions are kept for reference only: the current version is the one that applies.

  1. Current

    In effect today

    Information collected through the API

    • The IP addresses, HTTP headers and User-Agent sent with a request are not stored by Ipregistry once the request is answered, except in short-lived technical logs written when a request fails, and except for the address of the calling system. The network provider that carries the request keeps its own traffic and security logs.
    • Each request produces a usage record with the IP address of the calling system. These records are turned into counters per API key within seconds and are then discarded; only an outage on our side can delay this, by 7 days at most. The counters contain no IP address and are kept up to 12 months.
    • For API keys limited per client, the IP address of the calling system is kept up to 3 hours. When the API is called from an end user's browser, the calling system is that user's device.

    What we collect and how we use it

    • The sources of our databases are listed, including our own network measurements.
    • Searches made in the dashboard and information submitted through the tools of our website may be used to measure and improve our Services and our data.
    • Card details go directly to our payment provider. What we share with it and what we receive back is described.
    • Mentions of tailored advertising, of a device identifier and of Coinbase Commerce are removed.

    Retention

    • A new section states how long each kind of information is kept: account information, invoices, messages, LIR requests, technical logs (up to 30 days) and backups (up to one year).

    International transfers

    • Transfers outside the European Economic Area rely on the Standard Contractual Clauses, or on adequacy decisions, including the EU-U.S. Data Privacy Framework.
    • The Privacy Shield reference and the consent to transfers are removed.

    Other changes

    • The Services are not intended for anyone under 18.
    • The security cookie set by Cloudflare during an attack is listed among the cookies that need no consent.
    • LIR services: the reason for keeping the selfie taken for the identity verification is stated.
    • Audience measurement: the opt-out switch planned for the cookie settings page is no longer announced. You can object by blocking the beacon in your browser.
    • Significant changes to the policy are announced on our notices page and shown in the dashboard.
    • An account's email address is subscribed to our notices and product updates when the account is created, with a link to unsubscribe in each email.
    • The paragraphs on what our customers receive say that it is the information we hold about IP addresses, and that nothing a customer sends through the API is passed on to another customer.
    • The introduction no longer asks you to agree to the policy: use of the Services is governed by the Terms of Use and the Data Processing Addendum.
    • The Contact section gives an email address and our postal address. The Data Protection Officer mention is removed.

  2. In effect until November 13, 2026

    • Analytics and online tracking section rewritten for what the site and the dashboard actually use: cookieless audience measurement with Cloudflare Web Analytics; live chat, blog comments, partner attribution and dashboard usage recordings only with your consent; Noticeable and Stripe cookies as essential.
    • Google Analytics and the advertising opt-out programs are removed, and the cookie controls now point to the cookie settings page.
    • A Global Privacy Control signal is treated as a refusal.
    • Your dashboard search history and favorites are kept with your account while it is active.

  3. In effect until October 14, 2026

    • Data collected for LIR services (Internet number resource requests): holder and signer details, identity verification with Stripe Identity, supporting documents and their retention for 10 years after the resource ends.
    • New sections on providing LIR services and on sharing with the RIPE NCC.

  4. In effect until October 13, 2026

    • The Data Processing Addendum joins the documents governing the Services.
    • The Privacy Shield Framework is removed as a transfer mechanism, leaving the Standard Contractual Clauses.
    • Wording and typo fixes.

  5. In effect until August 1, 2022

    Full rewrite with numbered sections: scope, information collected, how it is used, what is shared and why, analytics and online tracking, your controls, international transfers, security, children, changes to the policy, contact and Data Protection Officer, plus the additional disclosures for the GDPR, the CCPA and the LGPD.

  6. In effect until October 20, 2020

    • Password no longer listed among the account information collected.
    • Log retention extended from four to five weeks.

  7. In effect until September 8, 2019

    First published version.