Overview
No sign-up or account is required to use any tool on NexKit Network Tools. This page explains how each tool handles what you enter, and what other data the site itself generates.
On-device tools
The following tools calculate entirely in your browser and never send the value you enter anywhere: the subnet / CIDR calculators, IPv4 and IPv6 address converters, MAC address formatter, URL parser, UUID generator, SHA hash generator, Base64 encoder/decoder, Unix timestamp converter, and the HTTP status code and port lookup references.
Where network-lookup tools send your query
When you use a DNS, RDAP / WHOIS, SSL certificate or HTTP header tool, the domain, IP address, hostname or URL you enter is transmitted from your browser to NexKit servers or to the upstream service that produces the result. Specifically:
- DNS, DNSSEC, reverse DNS and email-authentication checks (SPF, DKIM, DMARC, BIMI, MTA-STS, TLS-RPT and related record lookups): queried through Cloudflare’s, Google’s or AdGuard’s public encrypted DNS-over-HTTPS resolvers; the DNS Propagation Checker queries all three resolvers separately.
- RDAP / WHOIS lookups: routed through RDAP.org to the authoritative domain, IP or ASN registry.
- Public IP lookup and the IPv6 connectivity test: public IP address and approximate network location are provided by ipwho.is and ipify.org.
- SSL Certificate Checker: reads the newest matching record from a public Certificate Transparency data service.
- HTTP Header Checker: a public header-lookup service requests the URL you enter on your behalf and returns its final HTTP response headers — meaning that service itself requests the URL you entered.
These requests go directly from your browser to the named third-party service. How each service logs, retains or otherwise processes the request once it leaves your browser is determined by that service, not NexKit; review its own privacy documentation for specifics. NexKit does not create an account-linked, searchable history of these queries.
Website & DNS Monitoring (server-side feature)
/monitoring is a separate, opt-in feature. Unlike the tools above, its data is stored on NexKit’s servers:
- The target address you add, and a hashed version of a randomly generated key stored in your browser’s local storage (not the raw key itself), are stored to identify your saved targets.
- Resulting check history (status, latency, HTTP status code, DNS fingerprint and its changes) is stored so scheduled checks can run and be shown back to you as history and on a status page.
- If you opt in to email alerts, the email address you provide is stored and submitted to Resend, the third-party email-delivery service NexKit uses to send those alerts.
Hosting, logs and analytics
Requests to network.tools.nexkit.uk are served through Cloudflare, which can process request metadata (such as IP address, user agent, requested path and timestamp) to deliver, cache, secure and troubleshoot the site. The site uses Cloudflare Web Analytics to measure aggregate visits and performance, which does not rely on a tracking cookie. This review did not find any first-party tracking cookie set by NexKit Network Tools’ own application code. A specific log retention period was not verified during this review.
Contact
Privacy questions: contact@nexkit.uk. Security reports: security@nexkit.uk. See also Terms.