OCS Ping has no user accounts, no advertising and no behavioral profiling. The Google tag may load in Consent Mode with analytics storage denied by default; analytics cookies and storage are enabled only after you explicitly consent. The diagnostic tools remain available if you reject analytics.
1. Controller and service operator
OCS Ping is operated by One Core Spark SRL, a company established in Romania, CUI/CIF 39824776, registered office at Bd. Constantin Brancoveanu nr. 116, Sector 4, Bucharest, Romania (the “Operator”, “we”, “us”). For privacy-rights requests, you may contact the Operator through its publicly available corporate channels or by written correspondence to its registered office.
2. Scope
This Privacy Policy applies to the OCS Ping website, installed Progressive Web App (PWA), and the diagnostic services available through ocsping.com. It is intended to provide transparent information under applicable privacy laws, including the EU General Data Protection Regulation (GDPR), Romanian implementing rules, and, where applicable, comparable rights under other privacy regimes.
3. Personal data and technical data we process
- Connection data: public IP address, request date/time, requested URL, HTTP metadata, browser/user-agent information and security-related request data that may appear in normal web-server or security logs.
- Diagnostic input: domain names, public IP addresses, ports or URLs that you intentionally submit to a tool.
- Security and anti-abuse data: the source public IP address is used transiently to derive a pseudonymous keyed identifier for rate limits, temporary blocks, protected speed-test sessions and bandwidth accounting. We may also record limited abuse-event metadata such as time, safeguard triggered and a shortened pseudonymous identifier.
- Local device preferences: theme choice and your cookie/analytics consent selection, stored locally in your browser.
- Optional analytics data: if you consent, Google Analytics may process information about page views, device/browser characteristics, approximate location derived from IP address, referrer and interaction metadata for aggregate usage measurement.
- Normal browser cache: your browser may temporarily cache static files such as CSS, JavaScript and images as part of normal web browsing.
4. Why we process data and legal bases
| Purpose | Data | Legal basis / reason |
|---|---|---|
| Provide a diagnostic tool you request | Connection data and submitted target | Necessary to deliver the requested service and, where applicable, performance of a service requested by you; otherwise our legitimate interest in providing the requested functionality. |
| Security, abuse prevention and rate limiting | Pseudonymous keyed identifier and request metadata | Legitimate interests in protecting OCS Ping, its infrastructure and third parties from misuse. |
| Technical operation and troubleshooting | Server logs and error data | Legitimate interests in operating a secure and reliable service. |
| Remember user-selected interface preferences | Local browser storage | Storage necessary to remember a preference or feature explicitly requested by you. |
| Optional audience measurement and product improvement | Google Analytics usage data | Your consent for analytics storage and measurement cookies. Before consent, the Google tag runs with analytics storage denied and may send limited cookieless consent/measurement signals. Consent can be withdrawn through Cookie settings. |
5. Diagnostic tools and network targets
When you submit a target, OCS Ping uses it only to perform the selected diagnostic operation. Server-side checks may establish a network connection to the public host you entered. OCS Ping is designed to block server-side probing of private and reserved address ranges where appropriate. Submitted targets are not intentionally added to a permanent user history.
6. Email Health
When you use Email Health, OCS Ping derives the domain from the domain name or email address you enter and performs DNS queries and point-in-time technical checks for mail routing, SMTP reachability, reverse DNS, selected DNSBL/RBL reputation sources, SPF, DMARC, MTA-STS, TLS-RPT, DNSSEC, CAA and HTTPS certificate signals. These checks can cause the queried domain, mail-server hostnames or public server IP addresses to be visible to the relevant DNS resolvers, registry/registration-data services, blacklist operators and remote servers contacted as part of the requested diagnostic. Results may be cached briefly to reduce repeated network traffic.
7. Optional Google Analytics
OCS Ping uses Google Analytics 4 with Google Consent Mode. The Google tag can load when the page opens, but analytics storage, advertising storage, ad user data and ad personalization are denied by default. Before analytics consent, Google may receive limited cookieless consent or measurement signals that do not rely on Analytics cookies. If you choose Accept all or enable Analytics in Cookie settings, analytics storage is changed to granted so Google Analytics can use first-party measurement cookies for aggregate audience measurement. Google Signals and ad-personalization signals remain disabled by the OCS Ping implementation. You can change or withdraw your analytics choice at any time through the Cookie settings control in the footer.
15. Speed Test
The Speed Test transfers generated test data between your device and the OCS Ping server to estimate latency, jitter, download and upload throughput. The payload is synthetic test data, not user content, and the application does not intentionally retain it after the test.
8. Retention
OCS Ping keeps application-level data only as long as reasonably necessary for its stated purpose. Rate-limit and temporary-block counters operate on short operational windows. Domain registration lookup results may be cached temporarily (normally up to 30 minutes, with shorter caching for not-found results), while Email Health results may be cached briefly (normally up to 10 minutes) to reduce repeated external registry queries. Pseudonymous abuse-event files are configured for automated housekeeping and retention of no more than 7 days, while expired counters and sessions are removed during later housekeeping runs. Web-server, security, system and backup logs may be retained separately according to the infrastructure provider and server configuration. Browser preferences remain on your device until you clear site data or change the relevant setting.
9. Recipients and service providers
Technical data may be processed by hosting, network, security, DNS or infrastructure providers where needed to operate the site. When you use the IP / ASN Lookup tool, the public IP address you submit is included in a DNS query to Team Cymru's public IP-to-ASN mapping service in order to return BGP-origin information. When you use IP Blacklist Check, the IPv4 address you submit is encoded into DNSBL/RBL queries sent through DNS infrastructure to the configured third-party reputation-list operators in order to return listing status. When you use Domain WHOIS / RDAP Lookup, the domain you submit is sent to the authoritative registration-data service discovered through IANA's RDAP bootstrap registry, or to the relevant WHOIS service when fallback is required and available, in order to return public domain-registration metadata. OCS Ping does not intentionally load third-party advertising, social tracking scripts or externally hosted fonts. Google Analytics is the optional analytics provider and its tag may load in Consent Mode with analytics storage denied before consent; Analytics cookies/storage are enabled only after consent is granted. A public host that you explicitly ask OCS Ping to test will receive a connection from OCS Ping infrastructure as part of that diagnostic request.
10. International data transfers
Internet traffic can transit multiple jurisdictions. Where a service provider processes personal data outside the European Economic Area and applicable law requires safeguards, the Operator will rely on an available lawful transfer mechanism. A diagnostic target selected by you may also be located in another country.
11. Your privacy rights
Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction or portability of personal data, and to object to certain processing. Where processing is based on consent, you may withdraw that consent at any time. Because OCS Ping intentionally stores very little application-level data and does not maintain user accounts, in some cases we may not be able to identify data as relating to a particular requester without additional information.
Residents of the EU/EEA may also lodge a complaint with their competent supervisory authority. In Romania, the supervisory authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP). UK residents may have corresponding rights under applicable UK data-protection law. Where the California Consumer Privacy Act (CCPA/CPRA) applies, eligible California residents may have rights including access/knowledge, correction, deletion and non-discrimination. OCS Ping does not sell personal information and does not share personal information for cross-context behavioral advertising.
12. Automated decisions, profiling and children
OCS Ping does not use personal data to make decisions that produce legal or similarly significant effects, and it does not create advertising profiles. The service is a general technical utility and is not specifically directed to children.
13. Security
We use reasonable technical and organizational safeguards appropriate to the service, including HTTPS, input validation, destination restrictions, abuse prevention and traffic controls. No internet service can guarantee absolute security.
14. Changes to this policy
We may update this policy when the service, law or data-processing practices change. Material changes will be reflected on this page with a revised effective date.
Effective date: October 5, 2026 · Version: 1.9.2
