Privacy Policy

Tools that handle private keys

The CSR generator, key matcher, format converter and self-signed certificate generator run entirely in your browser. Private keys are never sent to ssl.sh. Our servers reject any request body that contains a private key.

Certificate checks

When you check a domain, our server connects to it and reads its public certificate. We cache results for a short time to reduce load and keep aggregate, non-personal statistics (for example, how many checked sites use TLS 1.3). Result pages for individual domains are not indexed by search engines.

Server logs

Our web server records IP address, time, requested URL and user agent for security and rate limiting. Logs are deleted after 30 days.

Monitor accounts

If you create a Monitor account we store your email address, the domains you add, check history and your notification settings. Payments are handled by our payment provider; we never see your card number. You can delete your account and all its data at any time from the account page.

Cookies

We use one session cookie when you sign in to Monitor. We do not use advertising cookies on tool pages.

Contact

Questions: hello@ssl.sh.