Privacy and cookies
Notice under Regulation (EU) 2016/679
Last updated: 17 October 2026
This notice explains how LBiT s.r.l.s. processes the personal data of visitors of 3load.com and users of its tools, under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003. The site is aimed at professionals and technicians: we only collect the data needed to run the tools you request and to protect the service. We use no traffic analytics, advertising or profiling.
1. Data controller
LBiT s.r.l.s., registered office Via Roma 146, 00071 Pomezia (RM), Italy; operational office Via dei Castelli 20, 05100 Terni (TR), Italy; phone +39 06 83960858, VAT P.IVA 12847871006. Privacy contact: [email protected]. No Data Protection Officer (DPO) is appointed, as the conditions of Art. 37 GDPR do not apply.
2. What data we process, why and for how long
2.1 Browsing data (logs)
For each request the servers record: IP address, date and time, requested URL, response code, browser user-agent and referring page. This is needed for technical operation and security (detecting abuse, attacks, errors). Legal basis: the controller's legitimate interest in service security (Art. 6(1)(f) GDPR). Retention: 52 days on the controller's servers, then automatic deletion. The site is served through the Cloudflare network (reverse proxy and DNS), which processes the same browsing data as a processor for attack protection (DDoS, bots).
2.2 Data you enter in the tools
The tools (Whois, DNS, propagation, DNS map, blacklists, SSL/TLS, Mail Check, SPF, Security Headers, Speed Test, Email header analyzer, Healthy, API) process the data you enter — domain names, hosts, IP addresses, email message headers, email addresses — solely to return the requested result (Art. 6(1)(b) GDPR: performance of a service requested by the data subject). Note: you are responsible for the data you enter; email headers may contain third-party data (addresses, IPs): only paste messages you are entitled to use. Headers pasted into the analyzer are processed in memory and not stored.
- Results and cache. DNS/Whois/SSL query results are not linked to you; some are cached for a few minutes or hours to reduce the load on the queried servers.
- Mailbox verification (Mail Check, Healthy). If you ask to verify that an email address exists, our server talks SMTP with the domain's mail server (RCPT TO command, no message is sent). The address is stored with the outcome and your IP for the usage limit for 90 days (Healthy) or not stored at all (Mail Check).
- Usage limits (rate limiting). To prevent abuse, the requester's IP is used to count requests within time windows (e.g. one Healthy check per hour, limits on Mail Check, Speed Test, API). Counters are temporary files keyed by a hash of the IP, discarded automatically when the window expires. Legal basis: legitimate interest (Art. 6(1)(f)).
- Measurements from Canada. DNS propagation, DNS map, Speed Test, IPv6 checks and part of Healthy also run from our server in Canada (OVH, Beauharnois) to measure from outside Europe. Only the item to check (domain/host/IP) is sent to the Canadian node, never your IP. See section 5.
2.3 Healthy (shareable report)
A Healthy report is saved under a random 32-character identifier and its page is accessible to anyone who knows the link: consider this before sharing it. Stored data: analysed domain, results, date, requester's IP (for the one-check-per-hour limit) and any contact/verified email address. Retention: reports and related data are deleted after 90 days; the requester's IP is removed from the report after 7 days. For 48 hours, requests for the same domain return the cached report.
2.4 SSL Monitor (certificate expiry alerts)
If you enable monitoring we store the email address, the monitored host, the sign-up IP, a confirmation/unsubscribe token, the daily check outcomes and the date of the last alert. Sign-up is confirmed by email (double opt-in); unconfirmed requests are deleted after 7 days. Legal basis: performance of the requested service (Art. 6(1)(b)). Retention: while monitoring is active; deletion is immediate via the unsubscribe link in every email or on request to the controller. Emails are sent from our servers (sender [email protected]) without tracking (no pixels, no tracked links).
2.5 Nerd Zone (game leaderboards)
If you submit a score we store the chosen nickname (do not use your real name if you do not want it public: the leaderboard is visible to everyone), the score, the game, the date and the IP (anti-abuse). The IP is removed after 30 days; nickname and score stay on the leaderboard. Nickname and personal records are also stored in your browser (localStorage, see section 4). Legal basis: performance of the requested service (Art. 6(1)(b)).
2.6 Contact and hosting request forms
Data entered in the contact form (name, email, phone, message) and in the hosting request form (personal and tax details, address, requested domain, email) are sent by email to [email protected] and used solely to answer your request and, if a contract follows, to perform it (Art. 6(1)(b)) and to meet tax and accounting obligations (Art. 6(1)(c)). They are not stored in the site's databases. Retention: as long as needed to handle the request; in case of a contract, for its duration and the following 10 years as required by law.
2.7 Client area
The "Client area" link leads to the service management panel (tr02.lbit-solution.it), which has its own privacy notice.
3. Provision of data
Providing data in the tools and forms is optional, but without it the requested service cannot be delivered. Browsing data is collected automatically by visiting.
4. Cookies and local storage
The site uses technical cookies only, which do not require consent (Art. 122 of Legislative Decree 196/2003; Italian DPA guidelines of 10 June 2021). There are no profiling, third-party or analytics cookies. The initial banner is therefore informational only.
| Name | Type | Purpose | Duration |
|---|---|---|---|
PHPSESSID | Technical, first party | Server session: chosen language, anti-abuse tokens for forms, state of checks in progress. | End of session (browser close) |
accepted | Technical, first party | Remembers that you closed the cookie information banner. | 12 months |
__cf_bm, _cfuvid (if any) | Technical, Cloudflare | Bot and attack protection set by the Cloudflare network serving the site. | Max 30 minutes / session |
| localStorage (Nerd Zone) | Technical, first party | Personal records, nickname, game sound on/off; never sent to the server unless you submit a score. | Until you clear it from the browser |
You can delete or block cookies in your browser settings; the site keeps working, but the chosen language will not be remembered between pages. For the games, the browser keeps the data until you clear the site data.
5. Recipients and transfers
Data is processed by the controller's authorised staff and by the following providers, appointed as processors (Art. 28 GDPR):
| Provider | Role | Location | Safeguards |
|---|---|---|---|
| Aruba S.p.A. | Hosting of the main server (data, database, logs, encrypted backups) | Italy (EU) | — |
| OVH SAS (OVHcloud) | Measurement server in Canada; encrypted backup copy of the main server | Canada | EU Commission adequacy decision for Canada (2002/2/EC, confirmed in 2024); backups encrypted with a key held by the controller |
| Cloudflare, Inc. | DNS, content delivery network, attack protection | EU / USA | Standard Contractual Clauses (SCC); EU-U.S. Data Privacy Framework certification |
| Cloudflare (cdnjs) | JavaScript libraries for the DNS map (D3, TopoJSON) downloaded by your browser | EU / USA | Your browser sends its IP to the CDN; no cookies |
| Google Ireland Ltd (Google Maps) | Map on the Contact page | EU / USA | Loaded only if you click "Show the map": before the click no data is sent to Google. Notice: policies.google.com/privacy |
Fonts (Inter, Space Grotesk, Orbitron) are hosted on our servers: no request is made to Google Fonts. Data is neither disclosed nor sold to third parties for commercial purposes. It may be communicated to authorities upon lawful request.
6. Security measures
Encrypted connections (TLS 1.2/1.3, HSTS), security headers (CSP, X-Frame-Options, nosniff, Referrer-Policy), per-IP request limits, SSH key-only server access, encrypted backups (AES-256) replicated between Italy and Canada, regular security updates, automatic deletion of data when the stated retention periods expire.
7. Your rights
You may exercise at any time the rights under Articles 15-22 GDPR: access, rectification, erasure ("right to be forgotten"), restriction, portability, objection to processing based on legitimate interest. Write to [email protected]: we reply within 30 days. For Healthy reports and game scores, state the report identifier or the nickname. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (Art. 77 GDPR), or with the authority of your EU country of residence, or to seek a judicial remedy.
8. Minors
The tools are intended for professionals; we do not knowingly collect data of children under 14.
9. Changes
This notice may be updated when tools or providers change; the date at the top shows the latest version. Substantial changes will be highlighted on the site.