Privacy policy

1. Who we are

Whois Mania (whois.albmania.com) is run by Magus Group Albania shpk, NIPT L92228018L, Linzë, Nd. 30, H. 31, Ap. 52, Dajti, 1040 Tiranë, Albania. We are the controller of the personal data described here.

For anything about your data, write to per@magusgroup.al with the subject "Të dhëna personale", or call +355 45 30 13 88.

We apply first Law No. 124/2024 "On personal data protection" of the Republic of Albania and Law No. 54/2024 "On electronic communications in the Republic of Albania". For visitors in the European Union we also apply Regulation (EU) 2016/679 (GDPR).

2. What we process, why and for how long

• What you look up. The domain name, IP address or AS number you type, so we can show its public records. The answer is kept in our server's cache for 10 minutes to 12 hours, depending on the block, so repeated lookups are fast and the public sources are not overloaded; it is not linked to you. Basis: our legitimate interest in providing the service you ask for.
• Your own address on "My IP". That page shows the IP address and the browser details your device sends, and looks your address up like any other query. Nothing else is done with them. Basis: providing the service you ask for.
• Session and protection against abuse. A session cookie remembers the lookups you opened and your choices; searches are counted per address to stop automated scraping. Session data ends 2 hours after your last visit; the counters reset within an hour. Basis: legitimate interest in keeping the site available and secure.
• Server records. When a page is requested, the web server notes the time, the page and the browser, to find faults. These records do not contain your IP address, are kept only briefly, and are never used to identify visitors.
• Error reports. When something breaks, a technical report (what failed, the page and the software version) goes to Sentry, in its European Union region. Reports are sent without IP addresses or other personal data and kept for up to 90 days. Basis: legitimate interest in a working site.
• Analytics, only with your consent. If you accept, Google Analytics 4 records the pages you open, how long you stay, your device type, browser and approximate location (country or city, worked out from your IP address, which Google Analytics 4 does not store). Microsoft Clarity records clicks, scrolling and mouse movement to show where a page is hard to use, with the text on the page masked. IP addresses inside page addresses are masked as ":ip" and query strings are removed before anything is sent. Google Analytics keeps the data for 2 months; Clarity keeps recordings for 30 days and summary heatmaps for up to 13 months. Basis: your consent, which you can withdraw at any time from "Cookie settings" at the bottom of every page.
• Public registration data. A domain or IP lookup can show the name, organisation, email or phone of its holder, exactly as the registry or regional internet registry publishes it. We do not collect it ourselves, build profiles or sell it; it stays only in the cache described above. Many registries hide private holders' data: to change what a registry publishes, contact the registrar of the domain.
• Backups. The site's database is backed up every night into an encrypted archive stored in the European Union. Backups are kept for 30 days, and one per month for 12 months.

3. Who receives data

We do not sell personal data or use it for advertising. These providers process data for us, under contracts that bind them to our instructions:

• Hetzner Online GmbH, Germany: the servers that run the site.
• Functional Software, Inc. (Sentry): error reports, stored in its European Union region.
• Cloudflare, Inc.: our domain names and the storage of encrypted backups in its European Union jurisdiction.
• Google Ireland Limited (Google Analytics 4) and Microsoft Ireland Operations Limited (Microsoft Clarity): only if you accept analytics.

To answer a lookup, the name or address you looked up (never who you are) is sent to the public sources that hold the answer: domain registries over RDAP and WHOIS, IANA and the regional internet registries, DNS resolvers (Cloudflare and Google Public DNS), and, for IP addresses, location and reputation services such as ipwho.is, iplocate.io, Shodan InternetDB, AbuseIPDB and HackerTarget. Each block on a result page names its source.

We give data to public authorities only when Albanian law obliges us to.

4. Transfers outside Albania

The site, its database, backups and error reports are kept in the European Union. Google and Microsoft may also process analytics data in the United States; they do so under the EU-U.S. Data Privacy Framework and the European Commission's standard contractual clauses, which are the safeguards Law No. 124/2024 and the GDPR require for such transfers.

5. Security

The site is served only over HTTPS. Keys for outside services are stored encrypted, backups are encrypted before they leave the server, and only named staff of Magus Group Albania can reach the administration, through Magus ID sign-in.

6. Children

Whois Mania is a technical tool not aimed at children, and we do not knowingly collect children's data.

7. Your rights

Under Articles 13 to 20 of Law No. 124/2024 (and Articles 15 to 22 of the GDPR, if you are in the European Union) you can:

• be told what data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data erased;
• have processing restricted;
• receive your data in a portable format;
• object to processing based on our legitimate interest;
• withdraw your consent at any time, as easily as you gave it ("Cookie settings" at the bottom of every page); this does not affect processing before the withdrawal;
• not be subject to a decision based solely on automated processing; we make none.

Write to per@magusgroup.al. We answer free of charge within 30 days; if a request is complex we may extend this by up to 60 days and will tell you why. We may ask you to confirm your identity. As we do not ask visitors who they are, we often hold nothing that identifies you.

8. Complaints

If you think we handle your data unlawfully, you can complain under Article 86 of Law No. 124/2024 to the Commissioner for the Right to Information and Protection of Personal Data (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale), Rr. "Abdi Toptani", Nd. 5, 1001 Tiranë, info@idp.al, idp.al.

If you are in the European Union you can also complain to the data protection authority of your country, for example the Garante per la protezione dei dati personali in Italy (garanteprivacy.it). We would be glad to hear from you first.

9. Changes

We update this policy when the site or the law changes; the date at the top shows the latest version. If a change needs your consent again, the cookie banner will ask.