Privacy policy

As of 2026-10-26. The German version is authoritative.

Network-Toolbox collects as little personal data as it can. There is no tracking, no advertising, and the pages load nothing from third parties: fonts, styles and scripts all come from our own server.

Controller

Email: af@maeh.org

Visiting the website and using the API

Your browser or client sends us your IP address and the usual request data (address of the page, time, browser identification). We need them to answer the request. We do not keep access logs, and the application's error logs contain no IP addresses.

To limit anonymous checks and login requests per network, we keep a keyed hash of your IP address (for IPv6, of its /64 network) in memory only. The key is random, exists only in memory and changes with every restart. The hash is discarded at the latest two hours after your last request.

We count the checks run per tool and day, separately for the website and the API, without any information about who ran them.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is operating the service securely and protecting it from abuse.

Checks

We use the host names, addresses and URLs you enter to run the check from our server. The target sees our server's IP address, not yours. We store neither the input nor the result of anonymous checks.

Account

To create an account you only need an email address. We store it with the time of registration and of the last login. Login links are valid for 15 minutes; after login, a session cookie keeps you logged in for up to 30 days. We store only hashes of login links and sessions.

For your monitors we store their settings, their current state, the results of the checks for 90 days (deleted by whole months, so for up to one month longer) and the alerts for 90 days. For notification channels we store their target, signing secret or access token, and the time and error of the last delivery.

You can delete your account on the account page at any time. This deletes all of its data immediately.

Legal basis: Art. 6 (1) (b) GDPR, providing the service you signed up for.

Emails and notifications

We send login links and alerts by email from our mail server, which logs the delivery (sender, recipient, time, result) for troubleshooting.

Alerts for a webhook or ntfy channel go to the address you configured: the name, target and state of the monitor, the time and the error. If you use a third-party service such as ntfy.sh, its privacy policy applies to what it receives.

Cookies

We set a single cookie, and only when you log in: the session cookie, which keeps you logged in. It is strictly necessary for the service you requested (§ 25 (2) no. 2 TDDDG), so it needs no consent.

Hosting and backups

Our server is operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany on our behalf, under a data processing agreement pursuant to Art. 28 GDPR.

We back up the database every day. Backups are kept for up to 5 weeks, so deleted data disappears from them after that time at the latest.

Beyond what is described here, we do not pass on personal data and do not transfer it to countries outside the EU.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object to processing based on our legitimate interests (Art. 21). Write to the email address above.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

We do not use automated decision-making or profiling.