Privacy Policy

What is not collected

• ·There are no accounts. Nothing on this site requires registration, and there is no sign-up, sign-in or password anywhere — so no name, email address or profile is ever collected.
• ·The configs you generate, the values you type into a generator form, and the variables you fill into a prompt are processed in your browser and are never sent to this site.
• ·No tracking pixels, no fingerprinting, no advertising identifiers set by this site, and no data sold or traded to anyone.

Anonymous analytics

• ·Vercel Analytics records page views, country, device type and Core Web Vitals in aggregate. It sets no cookie and does not identify individual visitors. It is not Google Analytics, which this site does not use.
• ·Copy and install counters are stored in a Supabase database as a single running total per item — for example, how many times a given script has been copied. The rows hold an item identifier and a number, and nothing about who did it.

What happens when you use a tool

• ·This is the one part worth reading carefully. The network tools work by asking a third party on your behalf, so what you type into them — an IP address, a domain, a hash, a CVE identifier — is sent to that service, together with this server's request, not your browser's.
• ·PermitANY does not log or store those queries. That is a statement about this site only: the service that receives the lookup has its own policy and its own logs, and this site cannot speak for them.
• ·If a value is sensitive, do not put it into a lookup tool — here or anywhere else. Tools that run entirely in your browser (the subnet calculator, Base64, the hash generator, the JWT decoder, the password generator) send nothing anywhere.

Third parties that receive tool queries

• ·IP and network: ip-api.com (geolocation), rdap.arin.net and rdap.verisign.com (WHOIS/RDAP), cloudflare-dns.com (DNS lookups), api.macvendors.com (MAC vendor lookup).
• ·Security and reputation: api.abuseipdb.com (IP reputation), services.nvd.nist.gov (CVE data, NIST), attack.mitre.org (ATT&CK technique data).
• ·Mail blocklists, queried by the IP reputation tool: check.spamhaus.org, www.barracudacentral.org, www.spamcop.net, www.sorbs.net, www.uceprotect.net, www.nordspam.com.
• ·Infrastructure: Vercel (hosting and anonymous analytics) and Supabase (the counter totals described above).

Cookies, advertising and browser storage

• ·PermitANY uses Google AdSense for advertising. Google and its partners may set cookies and use them to serve ads based on your prior visits to this and other sites. You can turn off personalised advertising in Google's Ads Settings, and opt out more broadly through the NAI and YourAdChoices opt-out pages.
• ·Ad units are placed between sections and never inside the output of a tool or a generator, and each one is labelled as an advertisement.
• ·Visitors in the European Economic Area, the United Kingdom and Switzerland are shown a consent message before advertising cookies are used, through Google’s own consent management platform. Your answer is recorded by it, and advertising behaves according to what you chose.
• ·Visitors in US states with a privacy law of their own are shown a “Do Not Sell or Share My Personal Information” link, served through the same platform. Using it opts you out of the sale or sharing of personal information for personalised advertising; the site keeps working exactly as before, and the ads become non-personalised rather than disappearing.
• ·Closing an ad stores a timestamp in your browser's localStorage so that slot stays quiet for 24 hours. It never leaves your browser, it is not readable by this site, and clearing your browser data removes it.
• ·No other cookie or browser storage is set by this site.

Your rights

• ·Because there are no accounts, there is in practice no personal data held about you that could be exported, corrected or deleted — the analytics are aggregate and the counters are anonymous.
• ·If you email the site, that message and your address are used to reply and for nothing else: no list, no newsletter, no third party.
• ·Under the GDPR, the CCPA or similar law you may still ask what is held about you. Write to contact@permitany.com and you will get a straight answer, including if the answer is “nothing”.

Children's privacy

• ·PermitANY is a professional reference and is not directed at children under 13. No personal information is knowingly collected from children.

Changes to this policy

• ·This page is updated when the site changes, and the date above moves with it. The previous version described accounts and an analytics product the site does not use; that is the kind of drift this notice exists to prevent.

Contact

Questions about this policy, or about anything above, go to the contact page. Who maintains the site and how the content is written is in about.