# Privacy Policy

> What ssl.sh collects when you use the checker, the tools, the API and Monitor, and how long we keep it.

Source: https://ssl.sh/privacy/
Last updated: 2026-11-10

## Tools that handle private keys

The CSR generator, key matcher, format converter and self-signed certificate generator run entirely in your browser. Private keys are never sent to ssl.sh. Our servers reject any request body that contains a private key.

## Certificate checks

When you check a domain, our server connects to it and reads its public certificate. We cache results for a short time to reduce load and keep aggregate, non-personal statistics (for example, how many checked sites use TLS 1.3). Result pages for individual domains are not indexed by search engines.

## Server logs

Our web server records IP address, time, requested URL and user agent for security and rate limiting. Logs are deleted after 30 days.

## Monitor accounts

If you create a Monitor account we store your email address, the domains you add, check history and your notification settings. Payments are handled by our payment provider; we never see your card number. You can delete your account and all its data at any time from the account page.

## Cookies

We use one session cookie when you sign in to Monitor. We do not use advertising cookies on tool pages.

## Contact

Questions: [hello@ssl.sh](mailto:hello@ssl.sh).