Privacy policy

Last updated October 27, 2026

Free checker (no account)

When you check a domain we connect to it over HTTPS and look up its registration (RDAP). Results are cached in memory for about 10 minutes. We do not store the domains you check against your identity, use no ads and no third-party tracking.

Accounts

If you create a free account we store, on our own server:

• your email address and the date you signed up and last logged in;
• your password as a salted scrypt hash (we never store or see the password itself);
• the websites you add and their latest public SSL certificate and domain-expiry results;
• login session tokens (stored hashed) and a security cookie used to protect forms.

We use cookies only to keep you logged in and to protect forms (CSRF); they are not used for advertising. Stored websites are re-checked about every 12 hours by connecting to them like a browser would. We do not sell or share your data. The site administrator can see member emails and their monitored websites to operate the service.

Alert e-mails

Members receive e-mail alerts when a monitored certificate is 30, 15 and 3 days from expiry, if it has expired, or if a site repeatedly fails its check. Alerts are on by default; you can turn them off for your whole account or for individual websites from your dashboard and Account page, or with the one-click unsubscribe link in every alert. To deliver these e-mails we pass your e-mail address and the alert content to our e-mail provider, Resend, which processes them only to send the message. We keep a short log of recent alerts (time, address, website, result).

Your choices

You can remove websites or permanently delete your account and all stored data at any time from Account. Data is kept until you delete it or your account. Questions: contact support via this website's operator.