Privacy Policy

Effective Date: November 15, 2026 | Service: netrecon.vercel.app

1. Data We Process and Purpose

NetRecon performs on demand network reconnaissance against public domains and IP addresses submitted by users. When you submit a target, the application processes the target string, resolved public IP addresses, and your requester IP address solely to execute security checks and enforce per IP rate limits.

2. Third Party Subprocessors and Network Requests

Executing a scan or loading the web interface transmits limited network metadata to the following external services:

Vercel (Hosting and Edge Logs): Receives your HTTP request metadata, including IP address and User Agent, to route requests and serve static assets.
ipwho.is and ipapi.co (IP Geolocation and ASN Lookup): Receive the resolved public IP address of the scanned target to return city, country, coordinates, and ASN ownership data. Your visitor IP is not sent to these providers.
Cloudflare (1.1.1.1) and Google Public DNS (8.8.8.8): Receive DNS queries for the scanned domain name to resolve A, AAAA, CNAME, MX, NS, TXT, PTR, and DMARC records.
jsDelivr CDN and Google Fonts: Receive standard browser asset requests (visitor IP and browser headers) when loading D3, TopoJSON, world atlas map geometry, and web fonts.
Upstash Redis (Optional Rate Limiting Store): When enabled in production, stores hashed or bucketed requester IP counters with a 65 second expiration TTL to prevent abuse.

3. Retention and Client Storage

NetRecon does not maintain a persistent user database of scan reports. In memory geolocation caches expire automatically after 15 minutes, and rate limit counters expire after 60 seconds. Recent scan history shown in the interface is stored exclusively in your browser localStorage and can be cleared at any time.

4. Cookies and Minors

NetRecon sets zero tracking or advertising cookies. This security auditing utility is intended for network administrators, developers, and security learners aged 16 and older.

5. Security and Contact

All outbound target connections enforce strict global unicast IP allowlists to prevent Server Side Request Forgery against private or internal networks. For privacy or security inquiries, open an issue on github.com/JoeBuildsThings/NetRecon or contact joethewebdev01@gmail.com.