Privacy policy
This policy explains how CHA.LA handles necessary data while providing IP intelligence, network analysis and account services. We collect only what is needed to provide the service, protect it and improve data quality.
Updated: September 22, 2026Information we process
- IP addresses, domains, ASNs or network prefixes that users submit for lookup.
- Request times, API paths, response status and security logs generated while using the service.
- When DNS resolution-path checks are used: one-time hostnames, source IPs of recursive resolvers, query times and the public egress for the session. We do not read browsing history or device DNS settings.
- Accounts, API keys, plans, quotas and billing records for registered users.
- Owned observations, public sources and authorized external data used for risk identification.
Third-party sign-in
When you choose GitHub or Google sign-in and complete authorization, we receive an account identifier, verified email and display name to create your account and recognize future sign-ins. We do not receive your GitHub or Google password or request access to repositories, email or cloud drives. A necessary cookie keeps your session active, and you can sign out at any time.
Data use
This information is used to return lookup results, maintain historical snapshots, identify proxy and malicious activity, protect the platform and API, measure service quality, and handle account and billing operations. External sources are used for gap filling or cross-checking only within their license terms.
Storage and retention
Lookup results and structured intelligence may be stored locally to build history and reduce duplicate requests. DNS resolution-path sessions and observations are normally removed about 24 hours after session expiry by a scheduled cleanup. Other retention periods depend on business needs, source licenses and security requirements; expired data is deleted or aggregated so it cannot be tied to a single request.
Sharing and disclosure
We do not sell account information or API keys. Limited information is disclosed to necessary service providers or authorities only to provide infrastructure, meet legal obligations, handle security incidents or fulfill explicit authorization.
Security measures
Access controls, key encryption, audit logs, rate limits and source isolation reduce the risk of disclosure or abuse. No internet service can guarantee absolute security; do not submit passwords, tokens or other sensitive content in lookup parameters.
Terms of service
When using CHA.LA lookup, API and data services, users must follow applicable laws, source licenses and platform access limits. Abuse, rate-limit circumvention and submission of passwords or tokens are prohibited.
Your rights and policy updates
You may request access, correction or deletion of information directly associated with your account. We will update the date on this page after material policy changes and provide an in-product notice when needed.