Privacy
Short version: no cookies, no accounts, no tracking. Checked domains are never stored with personal data.
The checker
- The domain you check is sent to our server, which asks SSLMate’s Cert Spotter API and crt.sh for that domain’s public certificate records.
- We cache those public records for 12 hours per domain name, so repeat checks don’t use our quota. The cache holds certificate data only, nothing about who asked.
- To stop abuse, each connection is limited to 10 checks a minute. For that, a one-way hash of your IP address plus the current minute is kept for at most two minutes. Your IP address itself isn’t stored.
- The checker sets no cookies and uses no browser storage.
Analytics
We use Cloudflare Web Analytics, which is cookieless and reports aggregate figures (page views, referrers, countries). Our hosting provider, Cloudflare, processes requests to serve the site.
Email alerts (when available)
If you sign up for deadline alerts, your email address is handled by MailerLite, our email provider, under double opt-in. Along with it we send the CA family and provider from your last check on that page (if any), and your domain only if you type it in. You can unsubscribe from any email. The form loads MailerLite’s script only when you scroll near it.