Privacy & cookies

Karmuz Network operates the autonomous system AS209990 and this website. The data controller for the processing described here is Karmuz (KVK 83633588), established in the Netherlands. For any privacy matter, contact us at privacy@karmuz.net.

We group cookies into three categories:

• Strictly necessary - always active. These keep the site working and store your consent choice. They cannot be switched off.
• Analytics - used only with your consent, to measure how the site is used so we can improve it.
• Functional - used only with your consent, to enable optional conveniences and enhanced tool features.

Our banner lets you accept or reject the optional categories, and you can change or withdraw your choice at any time - it is as easy to reject as to accept.

We do not sell your data and we do not share it with advertising networks or data brokers.

We use a small number of service providers, and they act as our processors: they handle data only on our instructions and under a contract. They cover hosting and delivering the site and, only if you have agreed to analytics, the analytics service.

We disclose data to competent authorities - including the ATKM, law enforcement and the Public Prosecution Service - and to the EOKM hotline, where a legal duty requires it or where we report a suspected criminal offence.

When you use a network tool, your query necessarily reaches the third-party sources and the host you chose to look up, as described above.

We process data within the European Economic Area wherever we can. Where a provider processes data outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. Where a lookup you run reaches a service or host outside the EEA, that transfer is an inherent part of the tool you chose to use and the destination you entered.

Technical logs, tool logs and flow records are kept for up to 30 days in our live systems. Copies in backups disappear as those backups age out on their normal rotation.

Where a log forms part of an abuse or security case, or where a legal duty applies - for example the six-month preservation required by Article 6 of Regulation (EU) 2021/784, or a preservation order from a competent authority - we keep the relevant records separately, only for as long as that case or duty lasts, and then delete them.

Your consent cookie lasts up to 180 days, or until you change it. Emails are kept for as long as we need them to deal with your request, and afterwards only where we need a record of what was agreed or a legal retention duty applies.

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we process it, and to data portability. Where processing relies on consent, you can withdraw it at any time (for cookies, via "Manage cookie preferences" above) without affecting processing already carried out.

To exercise any of these, email privacy@karmuz.net. If you believe we have handled your data improperly, you can lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl ↗ (opens in a new tab)), or with the authority in your country of residence.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

We do run automated systems that watch for attacks, abuse and routing problems. These can flag something for review, but a person decides anything that affects you.

We may update this policy as the service changes. The version and date at the top always reflect the current version; if a change affects the choices you have made, we will ask for your consent again.