LEGAL

Privacy policy

How CNIC Codes handles data. Short version: the lookup tool sends nothing anywhere, and the only data collected is what analytics and advertising partners gather.

EFFECTIVE 2 SEPTEMBER 2026

This policy explains what CNIC Codes (www.cniccodes.online) collects when you use the site, why, and what you can do about it.

The short version

  • CNIC numbers you type are never transmitted. The lookup tool runs entirely in your browser. There is no server that receives it, and nothing is stored.
  • No accounts, no logins, no newsletter. We do not ask you to register and we do not build user profiles.
  • Google Analytics is used, and it sets cookies. They count visits; they hold no name, email or CNIC. Details below.
  • No advertising is currently served. Details below.

Information we do not collect

Because the register is a static reference site, there is a great deal we simply never see:

  • CNIC numbers and prefixes you enter. The decoding happens in JavaScript on your device. No request is made to any server when you type a code, so no CNIC ever leaves your browser.
  • Names, addresses, dates of birth or identity documents. We hold no identity database of any kind and cannot look anyone up.
  • Payment information. Nothing is sold here.

This is a standing commitment rather than a description of the current feature set: this site will never add SIM-information lookup, number tracking, or any person-lookup feature. Such tools are illegal in Pakistan under the Prevention of Electronic Crimes Act 2016 and violate the privacy of people who never consented to being looked up. See the sources and ethics page.

Information collected automatically

Like almost every website, our hosting provider records standard technical information when a page is requested: IP address, browser and device type, the page requested, the referring page, and a timestamp. This is used to serve the site, keep it available, and diagnose faults.

Cookies

Google Analytics sets cookies on your device. They are usually named _ga and _ga_<id>, and they store a randomly generated number so that several visits from the same browser are counted as one visitor rather than several. They contain no name, no email address and no CNIC.

Apart from those — and any advertising cookies described below — the site sets no cookies of its own. It has no login, no preferences to remember and no shopping basket.

You can block or delete cookies in your browser settings. The register and every guide work normally with cookies disabled.

Advertising

No advertising is currently served on this site, and no advertising scripts are loaded. If that changes, this section will be updated before any ad code goes live, and the advertising partners and their cookie practices will be named here.

Analytics

Measurement tools run on this site. All of them report aggregate traffic; none identifies you by name, and only the first sets a cookie.

  • Google Analytics 4. Records page views, the page that referred you, approximate location derived from your IP address (country and city level, not an address), device and browser type. It sets the cookies described above. Google’s handling of this data is governed by Google’s Privacy Policy, and you can opt out across all sites with the Google Analytics Opt-out Browser Add-on.
  • Cloudflare Web Analytics. Also cookieless: it counts page views and referrers without storing anything on your device and without building a profile that follows you between sites. Governed by the Cloudflare Privacy Policy.
  • Vercel Web Analytics, from our hosting platform. Cookieless as well, covering the same aggregate page-traffic question. Governed by the Vercel Privacy Policy.

Neither is ever combined with anything you type into the lookup tool, because that data never reaches us in the first place. Analytics tell us that a page was read — never which code someone looked up.

Contact form

The contact form is processed by a third-party form provider. The name, email address and message you submit are transmitted to and stored by that provider so we can read and reply to it. We ask you not to include CNIC numbers or identity documents in a message.

Children

This site is a general-audience reference and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information through a message to us, please get in touch and it will be deleted.

External links

Some pages link to external sites, including nadra.gov.pk. Those sites have their own privacy policies and we are not responsible for their practices. Following a link means leaving this site.

Your choices

  • Block cookies in your browser settings — the site keeps working.
  • Opt out of personalised ads through the links in the advertising section above.
  • Opt out of Google Analytics with the official browser add-on, which works across every site that uses it.
  • Use a tracker blocker. We do not detect or discourage them.
  • Ask what we hold about you. For most visitors the honest answer is nothing beyond server logs, but you are welcome to ask.

Changes to this policy

If this policy changes materially — particularly if advertising or analytics are introduced or changed — the effective date at the top of this page will be updated. Continued use of the site after a change means you accept the revised policy.

Contact

Questions about this policy: info@cniccodes.online, or via the contact page.

NOT LEGAL ADVICEThis policy describes the site’s actual practices in plain language. It is not a substitute for legal advice, and if you operate this site in a jurisdiction with specific data-protection requirements, have it reviewed by a qualified professional.