Privacy Policy

Overview

Percival's Toolkit (percivalstoolkit.com) is a free set of network, DNS, security, and developer utilities. There are no user accounts, no logins, and no forms that ask for your name, address, or payment details. This policy explains what information the site's tools handle when you use them, what a small number of third-party services see, and what your options are.

Information the tools handle

Percival's Toolkit is a static website with no backend server or database of its own. When you use a tool — say, a DNS lookup, an IP geolocation check, or the password breach checker — your input (a domain, IP address, or similar) is sent directly from your own browser to the relevant third-party API listed below. The results are displayed to you in your browser. Percival's Toolkit itself does not receive, log, or store that input or its results anywhere.

The one piece of information the homepage shows automatically is your own public IP address and basic connection details (approximate location, ISP, browser, and device info), which come from your browser and the lookup services below. This is calculated fresh each time you load the page and isn't saved.

Third-party services the tools call

Each tool works by querying a specialized public API. These requests go straight from your browser to the provider below — Percival's Toolkit is not a proxy or intermediary, and each provider handles that request under its own privacy policy, not this one:

• ipify, ipapi.co, ipwho.is, geojs.io — public IP address and geolocation lookups
• Cloudflare (1.1.1.1, cloudflare-dns.com, speed.cloudflare.com) — DNS-over-HTTPS lookups and the speed test
• Google Public DNS (8.8.8.8, dns.google) — DNS-over-HTTPS lookups
• Quad9 (9.9.9.9) and OpenDNS (208.67.222.222) — latency checks
• NextDNS (dns.nextdns.io) — latency checks
• crt.sh — certificate transparency / subdomain lookups
• HackerTarget (api.hackertarget.com) — WHOIS/RDAP-style domain and IP lookups
• Have I Been Pwned (api.pwnedpasswords.com) — the password breach checker. This uses k-anonymity: only the first 5 characters of a hashed version of your password are ever sent, never the password itself or a full hash that could be reversed to it
• IANA (data.iana.org) — public TLD reference data

Because these are direct browser-to-API requests, the standard technical data any web request carries (your IP address, timestamp, and similar) is visible to that provider, the same as it would be if you'd queried them yourself.

Advertising

Percival's Toolkit uses Google AdSense. The site is in the process of being reviewed by Google, and once approved, Google and its advertising partners may use cookies or similar technology to serve ads, including based on your visits to this and other sites. You can review or opt out of personalized advertising through Google Ads Settings or aboutads.info, and read how Google itself handles data at the Google Partner Sites policy.

Cookies

Percival's Toolkit does not set any cookies of its own. With AdSense enabled site-wide, Google and its advertising partners may set cookies to measure and, once the site is approved, serve ads. You can clear or block these at any time through your browser's cookie settings, and you can manage ad personalization specifically through the links in the Advertising section above.

Affiliate links

Percival's Gear Picks page, along with a handful of single-product recommendations placed throughout the main toolkit page (labeled "Percival Recommends"), contain Amazon affiliate links. If you click through and make a purchase, Percival's Toolkit earns a small commission at no extra cost to you, through the Amazon Associates program. Amazon's own privacy policy governs any information collected once you're on amazon.com.

Donations

The Donate button links out to Ko-fi (ko-fi.com), a separate platform that handles any payment information directly. Percival's Toolkit never sees, processes, or stores your payment details — that entire transaction happens on Ko-fi, under its own privacy policy.

Server and hosting logs

Like most websites, the infrastructure hosting Percival's Toolkit automatically logs standard technical request data (such as IP address, browser type, and timestamp) for security and performance purposes. This is routine web server logging, not something Percival's Toolkit configures or accesses individually, and it isn't used to identify visitors personally.

Children's privacy

Percival's Toolkit is not directed at children under 13, and it does not knowingly collect personal information from children.

Your choices

Since the site doesn't maintain accounts or a database of personal information, there's nothing stored here to request, correct, or delete. You can still control cookies and tracking generally through your browser settings, and manage ad personalization through the links in the Advertising section above. If you have questions about anything on this page, reach out via the Contact page.

Changes to this policy

This policy may be updated occasionally, for example if a new tool, ad network, or analytics service is added. The "Last updated" date at the top of this page will always reflect the most recent change.

Contact

Questions about this policy can be sent through the Contact page.