Privacy policy

Short version: we only keep your email if you join the waitlist, we use it for one thing, and you can have it deleted at any time.

Who we are

CertWatch is run by the CertWatch team. We decide how the data described here is used (in GDPR terms, we are the "controller").

What we collect

• Waitlist sign-ups. If you join the early-access list, we save your email address, the domain you checked, and the date you signed up.
• Domains you check. We keep results in memory for 5 minutes so repeat checks are fast, then they are discarded. They are never written to disk and we don't build a list of checked sites.
• Your IP address, briefly. We hold it in memory for about a minute to enforce the rate limit (10 checks per minute), then it is discarded. We don't keep access logs.

We don't use cookies, we don't sell data, and we don't share it with advertisers.

Why we collect it

We use your email for one thing only: to tell you when certificate monitoring is ready. We send it because you asked to join the list (your consent), and you can withdraw that consent at any time.

How long we keep it

We keep waitlist emails until monitoring launches and we've told you about it. If you don't sign up for monitoring then, we delete your email within 30 days. If monitoring never launches, we delete the whole list within 12 months of collecting it.

Your rights and how to have your data deleted

You can ask to see the data we hold about you, correct it, or delete it. Email [email protected] from the address you signed up with and we'll handle it within 30 days. You can also complain to your local data protection authority.

Changes

If we change this policy, we'll update this page. If a change affects how we use your email, we'll tell you before it takes effect.