Privacy Policy

Effective date: 2026-10-21

This policy explains what data the CleanIP browser extension (for Chrome and Firefox, the "extension") handles, where it is sent and how long it is kept. The extension is built and operated by GiantAccel, LLC, the operator of cleanip.io.

What the extension sends

• The current website's server IP: to show the flag in your toolbar and the location in the This site panel, the extension sends the server IP your browser actually connected to to plugins.cleanip.io to look up its country and ASN. Only the IP address is sent — never the URL, domain, page title or page content.
• Your exit IP's purity report: only when you open the My network or Checks panel does the extension request a report for your current exit IP from cleanip.io. This is the same as visiting the cleanip.io home page and is covered by the cleanip.io privacy policy.
• Probes in Checks: the DNS leak test resolves one-off random subdomains of dp.cleanip.io, so CleanIP's DNS servers see your DNS resolver's IP and any subnet it attaches, kept in memory for about 8 minutes to produce the result. Your exit addresses come from mypublicipnow.com, an echo service run by CleanIP.

Third-party services contacted

• Cloudflare: plugins.cleanip.io is served through Cloudflare's network, so flag lookups pass through Cloudflare on their way to CleanIP's servers.
• Cloudflare DNS-over-HTTPS (cloudflare-dns.com): used only when your browser connected to a proxy's placeholder address or a private address, to find the website's real IP; the website's domain is sent in that case.
• STUN servers (Google, Cloudflare): used by the WebRTC leak test.
• chatgpt.com, claude.ai, gemini.google.com: contacted by the AI availability check, without cookies.
• Echo services in mainland China (124.222.230.137, cnip.pancdn.net): contacted by the split-routing check to see your China-bound exit.

Like any network request, these services see the IP address the request comes from. These probes run only when you open the Checks panel.

Storage and retention

• In your browser: lookup and check results are kept only in the browser's session storage and are cleared when you close the browser.
• On our servers: the server IPs the extension looks up are not written to logs or to CleanIP's query records. To speed up lookups, results are cached by IP for up to 24 hours; the cache contains no user identifiers.
• As with CleanIP's other APIs, the service log records the requesting IP, the endpoint path and the status code (not the IP being looked up) for abuse prevention and troubleshooting, and is rotated away automatically, usually within days. The pages of this site are served without access logs.

What we don't do

• We never read page content, forms, cookies or passwords, and never record your browsing history.
• The extension contains no analytics, ads or third-party tracking code.
• We don't sell, rent or share your data with third parties.

Permissions

• webRequest and access to all sites: to read the server IP that each page's main request connected to, in order to show the flag. Request and page content is never read.
• storage: to keep results for the current browser session.
• privacy (optional): requested only when you click the WebRTC one-click fix, to make WebRTC use only your proxy. You can restore the default from the extension at any time, and your browser restores its original setting if you uninstall.

Changes

We will post any changes to this policy on this page and update the effective date.

Contact

Questions about this policy? Email privacy@cleanip.io.