Privacy & cookies

Karmuz Network operates the autonomous system AS209990 and this website, and is the data controller for the processing described here. We are established in the Netherlands. For any privacy matter, contact us at privacy@karmuz.net.

Server logs. When you visit the site or use our network tools, our servers keep short-lived technical logs - your IP address, the time of the request, the page or query, and basic browser information. We use these to keep the service running, protect it against abuse and attacks, and diagnose faults. The legal basis is our legitimate interest in operating and securing the network (Art. 6(1)(f) GDPR). We keep these logs for up to 30 days.

Cookies. We use strictly necessary cookies to run the site and remember your consent choice. With your consent, we also use analytics cookies to understand how the site is used and functional cookies to enable optional features. You decide which categories to allow, and you can change or withdraw that choice at any time. The legal basis for the optional categories is your consent (Art. 6(1)(a) GDPR). See "Cookies and your choices" below.

Looking glass and network tools. When you run a lookup (DNS, WHOIS, ping, traceroute, routing, TLS), the target you enter - a domain, IP address, prefix, or AS number - is sent to our probe backend to carry out the check, and passed to the third-party sources needed to answer it (for example RIPE NCC / RIPEstat for routing data, public DNS resolvers, and the host you asked about). We do not build a profile of you from these queries; they are logged only briefly, with your IP, to enforce rate limits and prevent abuse (up to 30 days). The legal basis is our legitimate interest in providing and protecting the tool (Art. 6(1)(f) GDPR).

When you email us. If you write to our peering, NOC, abuse, security, or privacy addresses, we process your email address and message to handle your request. The legal basis is our legitimate interest in responding to you (Art. 6(1)(f) GDPR).

We group cookies into three categories:

• Strictly necessary - always active. These keep the site working and store your consent choice. They cannot be switched off.
• Analytics - used only with your consent, to measure how the site is used so we can improve it.
• Functional - used only with your consent, to enable optional conveniences and enhanced tool features.

Our banner lets you accept or reject the optional categories, and you can change or withdraw your choice at any time - it is as easy to reject as to accept.

We do not sell your data and we do not share it with advertising networks or data brokers. We rely on a limited number of service providers - for hosting and delivering the site, and, where you consent, for analytics - that act as our processors and handle data only on our instructions and under contract. When you use a network tool, your query necessarily reaches the third-party sources and the host you chose to look up, as described above.

We process data within the European Economic Area wherever we can. Where a provider processes data outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. Where a lookup you run reaches a service or host outside the EEA, that transfer is an inherent part of the tool you chose to use and the destination you entered.

Technical and tool logs are kept for up to 30 days. Your consent cookie lasts up to 180 days, or until you change it. Emails are kept for as long as needed to handle your request and to keep a reasonable record.

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we process it, and to data portability. Where processing relies on consent, you can withdraw it at any time (for cookies, via "Manage cookie preferences" above) without affecting processing already carried out.

To exercise any of these, email privacy@karmuz.net. If you believe we have handled your data improperly, you can lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the authority in your country of residence.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

We may update this policy as the service changes. The date at the top always reflects the current version; if a change affects the choices you have made, we will ask for your consent again.