The short version
- We set one essential cookie,
ubsid. It’s strictly necessary: without it forms can’t be protected against forgery. - If you use the light/dark switch, a second cookie,
ub_theme, remembers your choice. It’s only set when you press the switch, and it holds just the word “light” or “dark”. - Your browser’s local storage keeps your watchlist, your recently used tools and a few preferences. It stays on your device.
- Ads are served by Google AdSense, and Google and its partners use cookies to show and measure them. Where the law requires it (for example in the EEA, the UK and Switzerland), those cookies wait for your consent.
- Google Analytics shows us how the site is used, with its own cookies (
_ga). In the EEA, the UK and Switzerland it stores nothing until you agree. - Ahrefs Web Analytics counts visits without cookies: it stores nothing in your browser and doesn’t keep your IP address.
- Microsoft Clarity records how pages are used (clicks, scrolling) for heatmaps and replays, with its own cookies. It blanks out the tool area and what you type, and we don’t use it in the EEA, the UK or Switzerland.
- We use no tracking pixels, social widgets or fingerprinting.
The cookies we set
| Name | Purpose | Type | How long |
|---|---|---|---|
ubsid | Identifies your session on our server. The session holds a security token that protects forms. | Strictly necessary · first-party · HTTP-only | Until you close your browser. |
ub_consent | Remembers that you’ve seen the cookie notice (it holds “ok”), so it doesn’t open on every page. | Strictly necessary · first-party · set when you press “Got it” | Six months. |
ub_theme | Remembers whether you chose light or dark mode, so pages open that way without a flash of the other theme. | Preference · first-party · set only when you use the light/dark switch | One year, or until you switch again or clear it. |
ub_alert_x | Remembers which alert banners you closed, so they don’t come back. It holds only the numbers of those alerts. | Preference · first-party · set only when you close an alert banner | Seven days. |
These cookies are set by utibox.io only and sent only to our own site. ubsid can’t be read by JavaScript and doesn’t contain your email or any profile: it’s a random identifier. ub_theme holds only “light” or “dark”.
What we keep in your browser
| Key | What it holds | Who it’s for |
|---|---|---|
ub-watch | The services on your watchlist (up to 10). | Everyone who uses the watchlist |
ub-recent | The last few tools you opened, so you can pick up where you left off. | Everyone |
ub-theme | A copy of your light or dark choice, used to put the theme cookie back if it’s been cleared. | Everyone who uses the switch |
ub-speed-history | Your last 12 internet speed test results (time, download, upload, ping, jitter and which server ran the test), so you can compare them. They’re worked out in your browser and never sent to us. | Everyone who runs the speed test |
ub-speed-server | The speed test server you chose (the nearest, a city, or UtiBox’s private server), so your next test uses it. Never sent to us. | Everyone who changes the speed test server |
ub-dns-history | Your last 10 DNS lookups (domain, record type, time, and how many types had records and problems), listed under Recent lookups. Never sent to us. | Everyone who uses the DNS lookup |
ub-whois-history | Your last 10 WHOIS lookups (domain, time, days to expiry and the verdict), listed under Recent lookups. Never sent to us. | Everyone who uses the WHOIS lookup |
ub-spf-history | Your last 10 SPF & DMARC checks (the domain, the verdict and time), listed under Recent checks. Never sent to us. | Everyone who uses the SPF & DMARC checker |
ub-mx-history | Your last 10 MX record lookups (the domain, how many mail servers, the verdict and time), listed under Recent lookups. Never sent to us. | Everyone who uses the MX record lookup |
ub-ipl-history | Your last 10 IP address lookups (the address or AS number, its holder, the verdict and time), listed under Recent lookups. Never sent to us. | Everyone who uses the IP address lookup |
ub-rdns-history | Your last 10 reverse DNS lookups (IP address, the name found, the verdict and time), listed under Recent lookups. Never sent to us. | Everyone who uses the reverse DNS lookup |
ub-ssl-history | Your last 10 SSL certificate checks (host, port, time, days left and the verdict), listed under Recent checks. Never sent to us. | Everyone who uses the SSL certificate checker |
ub-ip-history | The last 10 addresses What Is My IP saw from this browser (address, approximate place, provider and time), so you can see when yours changes. Never sent to us. | Everyone who opens What Is My IP |
ub-legal-sums | Whether you switched off the plain-English summaries on these legal pages. | Everyone |
ub.* | Settings for individual tools: for example the password generator’s options, your typing-test best score, or a draft in the word counter. | Everyone |
ubdp-hist | The share of resolvers that had the update at each of your DNS propagation checks (up to 30 checks for each of your 20 most recent domains and record types), drawn as the propagation chart. Never sent to us. | Everyone who uses the DNS propagation checker |
ubdp-recent | Your last 8 DNS propagation checks (domain, record type, time and how many resolvers matched), listed under Recent checks. | Everyone who uses the DNS propagation checker |
ub-port-recent | Your last 8 port scans (host, port group, any ports you typed, time, and how many were open), listed under Recent scans. | Everyone who uses the port scanner |
ub-port-last | The result of your latest scan of each host and port set (time and each port’s state, at most 30), so the next scan can show what opened or closed since. Never sent to us. | Everyone who uses the port scanner |
ubdp-resolver | The last resolver IP address you asked under “Check from”, so the box is filled in next time. | Everyone who names a resolver |
ub_rm_pass | A time stamp kept for a moment in session storage when the full-report window opens a status page, so that page doesn’t show the window again. It’s deleted as soon as the page opens, and session storage is cleared when you close the tab. | Everyone who opens a full report |
Local storage isn’t a cookie: it isn’t sent with requests, and we can’t read it from our server. It stays until you clear it.
Advertising cookies (Google)
Ads on UtiBox are served by Google AdSense. When an ad loads, Google and its advertising partners may set or read cookies (for example __gads and __gpi on utibox.io, and IDE on doubleclick.net) and use similar technologies. They use them to show ads, limit how often you see the same ad, measure results and fight fraud, and, with your consent, to personalise ads based on your visits to UtiBox and other websites.
The small map of where a website is hosted, on WHOIS Lookup, is a Google Maps frame. Google may set or read its own cookies in that frame, under Google’s cookie policy; we can’t read them.
The map on IP Address Lookup is a Google Maps frame. Google may set or read its own cookies in that frame, under Google’s cookie policy; we can’t read them.
The map on Reverse DNS Lookup is a Google Maps frame. Google may set or read its own cookies in that frame, under Google’s cookie policy; we can’t read them.
On tools that run on our server, Google reCAPTCHA v3 checks in the background that requests come from a person rather than a script. Google may set or read its own cookies and similar storage for this (for example _GRECAPTCHA), under Google’s cookie policy; they’re needed to protect the site from abuse, and we can’t read them. Pages that run entirely in your browser don’t load it.
The map on What Is My IP is a Google Maps frame. Google may set or read its own cookies in that frame, under Google’s cookie policy; we can’t read them.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
- Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to UtiBox and/or other sites on the internet.
- You can opt out of personalised advertising in Google’s Ads Settings, and opt out of other vendors’ personalised advertising at aboutads.info or youronlinechoices.eu.
- UtiBox is free because of ads, so advertising is always on. Our cookie notice tells you about it on your first visit, and “Ads & cookies” at the bottom of every page shows the details again.
- In the EEA, the UK and Switzerland, Google’s consent message asks for your choice before ad cookies are used (it’s switched on when ads go live). If you don’t agree, Google still shows ads, but they aren’t personalised.
These cookies belong to Google and its partners, not UtiBox, and are covered by Google’s cookie information and Privacy Policy. Ads never appear in the admin area.
Analytics cookies (Google Analytics)
We use Google Analytics 4 to understand how UtiBox is used: which pages and tools are opened, how people arrive (for example from a search engine or another site), and the type of browser and device. It helps us decide what to fix and build next. Google Analytics sets these cookies on utibox.io:
| Cookie | What it does | Kept for |
|---|---|---|
_ga | Tells one visitor’s visits apart from another’s with a random number. It doesn’t contain your name, email or IP address. | Up to 2 years |
_ga_0JM0498TPL | Keeps track of the current visit (session) for the same property. | Up to 2 years |
- In the EEA, the UK and Switzerland, these cookies are set only if you agree in Google’s consent message. Until then Google Analytics stores nothing on your device and receives only signals without cookies or identifiers, so your visits can’t be linked together.
- Google Analytics doesn’t log or store IP addresses; Google uses them only to work out a rough location (country and city) and then discards them.
- To opt out of Google Analytics on every site, install the Google Analytics opt-out browser add-on. You can also block or delete the cookies in your browser.
These cookies belong to Google and are covered by how Google uses information from sites that use its services and Google’s Privacy Policy. Analytics never runs in the admin area.
Cookieless analytics (Ahrefs)
We also use Ahrefs Web Analytics to count visits and see which pages people open and how they arrive. It sets no cookies and stores nothing in your browser, so there’s nothing of it to find or clear in your cookie settings. When a page loads, your browser sends Ahrefs the page address and title, the page that sent you, your language and your screen size, and Ahrefs reads your browser and device type from the request. When you click a link or send a form, it records where the link goes or where the form is sent, never what you type.
- To count each visitor once a day, Ahrefs combines your IP address and browser details with a random value that it deletes and replaces every 24 hours, so your visits can’t be linked from one day to the next.
- Ahrefs uses your IP address to work out your country and city, then discards it. The address is never stored.
- Because it stores nothing on your device, we use it for every visitor, including in the EEA, the UK and Switzerland.
- To opt out, block scripts from analytics.ahrefs.com in your browser or with a content blocker.
This data is processed by Ahrefs and covered by the Ahrefs Privacy Policy. Analytics never runs in the admin area.
Usage recordings (Microsoft Clarity)
We use Microsoft Clarity to see how pages are used: heatmaps of clicks and scrolling, and anonymised replays of visits, so we can find what confuses people and fix it. Clarity blanks out what you type into forms and the whole tool area, so it never records your tool input or results. We don’t load Clarity at all for visitors in the EEA, the UK or Switzerland. Elsewhere, Clarity sets these cookies on utibox.io:
| Cookie | What it does | Kept for |
|---|---|---|
_clck | Keeps a random Clarity ID for your browser, so visits can be counted as the same visitor. | About a year |
_clsk | Joins the pages of one visit into a single recording. | One day |
Microsoft may also set its own cookies on its own domains (for example MUID and CLID); see Clarity’s cookie list. Recordings are kept for up to 30 days. These cookies belong to Microsoft and are covered by the Microsoft Privacy Statement. To opt out, block cookies and scripts from clarity.ms in your browser or with a content blocker.
What we don’t use
- No tracking pixels, social widgets or device fingerprinting.
Our typeface (Geist) is served from our own server, so loading a page doesn’t contact Google Fonts.
If this changes
If we add other cookies, we’ll update this page and our Privacy Policy first, and anything optional will stay off until you agree where the law requires consent.
How to control it
Ads stay on, because they pay for UtiBox. You control how they’re personalised: turn off personalised ads in Google’s My Ad Center, and opt out of other companies’ personalised ads at aboutads.info or youronlinechoices.eu. In the EEA, the UK and Switzerland, “Ads & cookies” at the bottom of every page reopens Google’s consent message so you can change your answer.
To opt out of Ahrefs Web Analytics, block scripts from analytics.ahrefs.com in your browser or with a content blocker. It stores nothing on your device, so there’s nothing of it to clear.
To opt out of Microsoft Clarity, block cookies and scripts from clarity.ms in your browser or with a content blocker.
To opt out of Google Analytics, install the Google Analytics opt-out browser add-on. In the EEA, the UK and Switzerland, Google Analytics also follows your answer in Google’s consent message.
You can delete the cookies and everything in local storage by clearing this site’s data in your browser’s settings. You can also block cookies for utibox.io, but then some forms won’t work. Clearing local storage removes your watchlist and your tool settings for good, because we don’t keep a copy.
Contact
DigiePal Networks LLC
5830 E 2nd St, Ste 7000 #26169, Casper, Wyoming 82609, US
Email: support@utibox.io
Or use the contact form and choose “Privacy & data requests”.
What we collect, how long we keep it and your rights.
The rulesTerms of UseThe rules for using UtiBox.
- 13 November 2026Version 1.11: Google reCAPTCHA v3 added on tools that run on our server (Google’s own cookies, such as _GRECAPTCHA, to protect the site from abuse).
- 13 November 2026Version 1.10: local storage added for the SPF & DMARC checker’s recent checks (ub-spf-history).
- 13 November 2026Version 1.9: local storage added for the MX record lookup’s recent lookups (ub-mx-history).
- 13 November 2026Version 1.8: local storage added for the IP address lookup’s recent lookups (ub-ipl-history), and the Google Maps frame on that page.
- 12 November 2026Version 1.7: local storage added for the reverse DNS lookup’s recent lookups (ub-rdns-history), and the Google Maps frame on that page.
- 12 November 2026Version 1.6: local storage added for the WHOIS lookup’s recent lookups (ub-whois-history), and the Google Maps frame on that page.
- 12 November 2026Version 1.5: local storage added for the DNS lookup’s recent lookups (ub-dns-history) and the SSL certificate checker’s recent checks (ub-ssl-history).
- 12 November 2026Version 1.4: local storage added for What Is My IP’s address history (ub-ip-history), and the Google Maps frame on that page.
- 11 November 2026Version 1.3: local storage added for the DNS propagation checker (ubdp-hist, ubdp-recent and ubdp-resolver), the port scanner (ub-port-recent and ub-port-last) and the speed test’s chosen server (ub-speed-server).
- 10 November 2026Version 1.2: Ahrefs Web Analytics added (cookieless visit counts: what it receives and how to opt out).
- 9 November 2026Version 1.1: Google Analytics and Microsoft Clarity added; our typeface is now served from our own server.
- 9 November 2026Version 1.0, first published.