What does your IP reveal?
Every website you open sees your IP address. From it, a site can guess roughly where you are and who your internet provider is. How much does that really give away? And what else does your browser tell sites about you without asking?
What your IP address reveals, and what it doesn't
An IP address is like the return address on an envelope, but for your internet connection. It's given to you by your provider (for example e& or du in the UAE), and it often changes.
Your rough location, usually the city or only the country. Your internet provider. Whether you're on home internet, mobile data or a hosting company's servers. A time zone.
Your home address, your name, your phone number or your Emirates ID. The location is a guess from public databases, and it's often off by many kilometres. Many customers can share the same address.
Your provider knows which customer had which address at which time. That's the link. Police and the Public Prosecution can request those subscriber details from the provider through legal process. A random website can't.
Your IP is enough to show local prices and language, block suspicious logins, limit some content to a country, and help recognise you again together with cookies and your device's fingerprint.
What else your browser tells sites
Your IP isn't the only clue. Your browser shares other small details with every site, without asking. None of them names you, but together they help sites recognise you.
WebRTC is the browser feature behind video calls. To connect two people, it asks a "STUN" server for your public address, and a web page can read the answer. Older browsers also showed your device's address inside your home network.
Every site can read your device's time zone and the languages you prefer. That's how sites pick Arabic or English for you, and it's one more clue about where you are.
Many connections have two kinds of address: IPv4 and the newer IPv6. Each one tells sites your provider and rough location.
Before opening a site, your device asks a DNS server for its address, usually your provider's. On shared Wi-Fi, whoever runs the network may see which sites you open, but not what you type on secure (https) pages.
VPNs in the UAE
Only companies and institutions may use VPNs, for approved business purposes, for example so staff can reach the office network. Using a VPN or any other means to get around the UAE network with a fake or someone else's IP address is a crime.
Federal Decree-Law No. 34 of 2021 on Combating Rumours and Cybercrimes punishes anyone who gets around the network's IP address, using a fake address, someone else's address or any other means, to commit a crime or to stop it being discovered.
Penalty: temporary imprisonment and/or a fine from AED 500,000 to AED 2,000,000.
The same law punishes unlawfully using, or helping others use, blocked communication services or broadcast channels through a network or technical means.
Penalty: imprisonment and/or a fine from AED 250,000 to AED 1,000,000.
Practical privacy tips
- Look for "https" and the padlock in the address bar before you type a password or card details.
- Don't log in to your bank on open public Wi-Fi at a café or mall. Use your mobile data instead.
- Keep your browser and phone updated. Updates fix security holes and hide more details about your device.
- Check which apps and sites are allowed to use your location, and turn it off for the ones that don't need it.
- Remember that logging in and cookies identify you far more precisely than your IP address does.
- Don't post screenshots that show your IP address. Alone it can't find your home, but it helps someone target attacks on your connection.
How this works: this site's own server reads your address and the rough location that Cloudflare (the network that delivers this site) already attaches to every visit, and sends it straight back to you. It isn't saved anywhere. The WebRTC check only runs if you tap it, and it asks Google's public STUN server (stun.l.google.com) for your address, the same way video-call apps do. Your guesses are counted anonymously, with no personal details.
Sources: Federal Decree-Law No. 34 of 2021 on Combating Rumours and Cybercrimes, Articles 10 and 50 (UAE legislation portal; penalties as reported by Gulf News, including the UAE Public Prosecution's December 2024 awareness post); the Telecommunications Regulatory Authority (now TDRA) on VPN use by companies and institutions (Khaleej Times); Cloudflare's documentation on visitor location data; the WebRTC and ICE standards (W3C, IETF). Location from an IP is an estimate and is often wrong.