Last updated: 22 October 2026
1. Overview
iinbin.com ("we", "us", "our") operates a free online BIN/IIN lookup tool. This Privacy Policy explains what information is collected when you use the service, why we collect it, and the choices available to you. We designed the service to work without accounts, so most visitors never provide personally identifiable information at all.
2. Information we collect
Information you provide
- BIN / IIN numbers you look up. These are submitted to our server to retrieve card metadata. We do not require, ask for, or want full card numbers, and we do not store card numbers.
- Messages you send us via the contact page or by email.
Information collected automatically
- Server logs: IP address, timestamp, requested URL, HTTP status, user agent and referring page. These are retained for a short period for security, troubleshooting and abuse prevention.
- Aggregated usage statistics: number of lookups performed, response times and error rates, used to improve performance and stability.
- Cookies and local storage: a small amount of client-side storage is used to remember your selected interface language and to protect the query form with Cloudflare Turnstile. These are strictly functional and are not used for advertising or cross-site tracking.
3. How we use information
- To perform the BIN/IIN lookup you requested and return the correct result.
- To protect the service against automated abuse, scraping and denial-of-service attacks.
- To diagnose errors, measure performance and improve the reliability of the tool.
- To respond to enquiries, abuse reports and legal requests.
4. Data we do not collect
- We do not ask for, require or store full card numbers, CVV codes, PINs, cardholder names or expiration dates.
- We do not require an account, and we do not require you to submit an email address to use the tool.
- We do not sell, rent, trade or license your personal information to third parties for marketing purposes.
5. Third-party services
We use a small number of third-party services to operate the site:
- Cloudflare — content delivery network, web application firewall, rate limiting and Turnstile human verification. Cloudflare may process technical data such as IP addresses to deliver the site and prevent abuse.
- Upstream BIN/IIN data providers — the authoritative card metadata source. Only the BIN/IIN number you submit is transmitted; no personal information is shared with them.
- Hosting provider — our web and database servers are hosted by a third-party provider that processes technical connection data as part of serving requests.
Each provider processes data under its own privacy terms. We do not embed advertising trackers, data brokers, or third-party behavioural profiling scripts.
6. Data retention
Technical logs are retained for a limited period sufficient for security and troubleshooting, and are then deleted or anonymised. Lookup records are not associated with an identity and are used only in aggregate for capacity planning and abuse detection.
7. Cookies
We use only functional cookies and browser storage required to operate the tool: language preference and Cloudflare Turnstile's challenge state. You can clear or block cookies in your browser at any time; the lookup tool will continue to work.
8. Security
The site is served exclusively over HTTPS. Requests are filtered by a web application firewall, rate limited, and protected by Turnstile verification to reduce automated abuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete or restrict the processing of personal data relating to you, and to object to certain processing. Because the tool generally requires no account and we do not build behavioural profiles, in most cases there is no personal data associated with your use of the service. To make a request, contact us via the contact page and we will respond as required by applicable law.
10. International transfers
Our infrastructure and service providers may process data in countries other than your own. Where required, appropriate safeguards such as standard contractual clauses are used for international transfers.
11. Children's privacy
The service is a general-audience information tool and is not directed at children under 13. We do not knowingly collect personal information from children.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted on this page.
13. Contact
For any privacy question, data request, or to report a concern, please reach us through the contact page or by email at [email protected].