Privacy and cookies
Effective 2026-09-11 (draft)
[TODO: legal review] This page is a placeholder. It describes what the service does, but its wording has not been reviewed by a lawyer and it is not a finished policy.
Who we are
Egress (egress.apps.blackravine.com) is a service by Black Ravine. It shows the public IP address your connection leaves from, and what the network knows about that address.
What the service processes
- Your request — Your IP address and what Cloudflare's edge reports about the request (approximate location, network, data centre, HTTP and TLS versions) are computed for each request, to answer it. They are not stored: request logs are turned off for this service.
- Hostname — The name of your address comes from one DNS-over-HTTPS query to Cloudflare's resolver, made by the service. Private addresses are never looked up.
- Looked-up addresses — An address you look up with
?ip=is answered and not recorded. Its location and network come from MaxMind's GeoLite databases when that lookup is enabled; it is off today.
Services your browser contacts
These hosts receive requests from your browser, so they see your connection as any server you reach does. None of them receives what this site knows about you.
- Cloudflare — 1.1.1.1 and 2606:4700:4700::1111 on every visit to the home page, to find your connection's other address (IPv4 or IPv6), which stays in your browser. speed.cloudflare.com and invalid.rpki.cloudflare.com, and those two again, during the speed test; on the home page the test also asks speed.cloudflare.com/cdn-cgi/trace once which of Cloudflare's data centres it runs against, and only that is read. Random names under help.every1dns.net, and this site's own /cdn-cgi/trace, for the Security panel: they show which DNS resolver answers for your browser and whether the connection is encrypted.
- Black Ravine — A random name under nx.blackravine.com, the speed test's DNS probe.
- OpenFreeMap — tiles.openfreemap.org draws the map. It sees the area on screen, at city level at most, and never the address: the page keeps a looked-up address out of those requests. When the speed test's data centre is far from your city, the map shows the wider area between the two.
- Google (Firebase Analytics) — googletagmanager.com, google-analytics.com, firebase.googleapis.com and firebaseinstallations.googleapis.com, only while analytics is on.
Analytics
Egress measures how the site is used with Google Analytics, through Firebase. What it sends: the kind of page you are on, your connection's IP version, the Cloudflare data centre and the HTTP and TLS versions, the speed test's results (speeds, delays, verdicts, AIM scores and the reachability checks), the Security panel's verdicts (the resolver's provider as Cloudflare, Google or other, never its name), whether the home page found your connection's other IP version and whether you copied an address (the IP version only), whether the map loaded, page performance, which formats you open, and the names of errors.
Never sent: your IP address or any address you look up, the hostname, coordinates, city, region, postal code, timezone or country, your network's number or name, your browser's user agent, anything you type, or an identifier of our own. Google still receives the requests from your browser and so sees your connection; GA4 says it does not log or store IP addresses. Google signals and ad personalisation are off.
Analytics is on by default, except in the EU, the EEA, the UK, Switzerland and wherever the country cannot be told, where nothing loads until you accept. Global Privacy Control and Do Not Track turn it off, and it cannot be turned on while your browser sends them. You can change your choice at any time below.
Analytics data is kept for [TODO: GA4 data retention, 2 months recommended].
Cookies and local storage
- __Host-egress_consent — Necessary · 12 months. Your cookie choice: a version number and on or off. No identifier.
- __Host-egress_notice — Necessary · until the browser closes. That you closed the cookie notice with [x] without choosing: nothing is recorded as a choice, your region's default stays, and the notice comes back on your next visit.
- localStorage: egress.map.theme — Necessary · until you clear it. The map theme you picked, and nothing else.
- localStorage: egress.speed.last — Necessary · 3 hours. Your last speed test's results and the address they were measured from, so the home page shows them instead of measuring again. Replaced by your next run, and removed on the first visit after it expires.
- _ga — Analytics · up to 13 months. Google Analytics' client identifier, on this host only.
- _ga_<ID> — Analytics · up to 13 months. Google Analytics' session state for this site.
- IndexedDB: firebase-installations-database — Analytics · until analytics is turned off. The Firebase SDK's installation identifier.
- IndexedDB: firebase-heartbeat-database — Analytics · until analytics is turned off. The Firebase SDK's record of when it last ran.
Turning analytics off deletes the analytics cookies and databases above. Nothing else is stored in your browser.
Your choice
Speed test
The speed test runs in your browser against Cloudflare's measurement servers. On the home page it starts on its own for your own address, unless your browser asks to save data or reports a cellular link, or it already measured that address in the last three hours: then the home page shows the result it kept in your browser until you run the test again. Its results stay in your browser: none of the measurement hosts receives them, and nothing is stored on our side. With analytics on, they reach analytics as numbers and verdicts, never with your address. The home page's map draws a line from your city to the Cloudflare data centre the test runs against, a place Cloudflare publishes; the line is not stored or sent anywhere.
Legal bases and your rights
[TODO: legal review] Answering your request needs your address, which is the service you asked for. Analytics relies on your consent where the law requires it first, and elsewhere on a legitimate interest you can object to with the choice above or your browser's privacy signal. Under the LGPD and the GDPR you can ask what is processed about you and object to it; see Contacting us.
Changes
When this policy changes in a way that affects what is collected, the version of the cookie choice goes up and the notice asks you again.
Contacting us
To exercise your rights over your data — access, correction, portability, deletion — write to privacy@blackravine.com.