Privacy
Privacy
Short version: certificates, CSRs and private keys never leave your browser. The CAA checker and CT log search send only the domain name you enter, to Cloudflare’s DNS resolver and to crt.sh. Page views are counted with cookie-free Cloudflare Web Analytics.
Certificates, CSRs and keys
The decoders, generators, key matcher, chain checker and converter run as JavaScript in your browser. Text you paste and files you open are processed on your device and are not uploaded or sent anywhere. Generated private keys are created by your browser’s Web Crypto API and exist only in the open tab until you save them. Nothing is stored: closing or reloading the page discards it.
CAA record checker
To find CAA records, your browser sends the host name you enter and its parent domains (for example www.example.com, example.com and com) to Cloudflare’s public DNS resolver at https://cloudflare-dns.com/dns-query, encrypted over HTTPS. Cloudflare’s own privacy commitments for its public resolver apply to those queries. The CAA generator runs entirely in your browser.
CT log search
The CT log search sends the domain name you enter to crt.sh, a public Certificate Transparency log search service, at https://crt.sh/json. The request goes directly from your browser, so crt.sh receives your IP address and browser details as with any website, and its own policies apply. Links to individual certificates open crt.sh pages.
Cookies, analytics and storage
- The site uses Cloudflare Web Analytics, which Cloudflare adds to the pages it serves. It counts page views without cookies or cross-site tracking, and it never receives what you type, paste or drop into the tools.
- No cookies, advertising, cross-site trackers or accounts, and no analytics of the site’s own.
- If you change the colour theme, the choice (light or dark) is stored in your browser’s local storage, on your device only.
Hosting
The site’s static files are served by Cloudflare. As with any website, your browser’s requests for these pages, including your IP address and browser details, reach the hosting network in order to be answered.
Links to other sites
Links to other websites, such as the sister sites in the footer, CleanTempMail, WebTraceCheck or crt.sh, take you to those sites, and their own privacy policies apply there.