Privacy Policy

Last updated: January 2025

1. Introduction

MySSL.info ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SSL certificate monitoring and TLS security scanning services.

We understand the importance of data security, especially for businesses relying on SSL/TLS certificates to protect their websites and customer data. Our commitment to transparency ensures you understand exactly how your data is handled.

2. Information We Collect

2.1 Account Information

  • Email address for account registration and notifications
  • Name (optional) for personalisation
  • Password (securely hashed and never stored in plain text)

2.2 Domain and Certificate Data

  • Domain names you add for SSL monitoring
  • SSL/TLS certificate information (public certificate data only)
  • Security scan results and SSL grades
  • Certificate expiry dates and renewal status

2.3 Technical Data

  • IP addresses for security and analytics purposes
  • Browser type and version
  • Usage patterns and feature utilisation
  • Error logs for troubleshooting

3. How We Use Your Information

1

SSL Monitoring: To scan and monitor your SSL certificates, detect security vulnerabilities, and send expiry alerts.

2

Security Alerts: To notify you of certificate expiration, security issues, or configuration problems via email, Slack, Discord, or webhooks.

3

Service Improvement: To enhance our SSL scanning algorithms, improve accuracy, and develop new security features.

4

Customer Support: To respond to your enquiries and provide technical assistance.

4. Data Security

We implement industry-standard security measures to protect your data:

Encryption

All data transmitted using TLS 1.3 encryption

Password Hashing

Bcrypt hashing with secure salting

Access Controls

Role-based access with regular audits

Secure Infrastructure

EU-based servers with DDoS protection

5. Data Retention

  • Account data: Retained while your account is active, deleted within 30 days of account closure
  • Scan history: Based on your subscription tier (30 days to unlimited)
  • Public scans: Retained for 24 hours unless linked to an account

6. Third-Party Services

We integrate with the following services to enhance your experience:

  • Slack, Discord, Telegram: For alert delivery (only when you configure these integrations)
  • Google Analytics: For anonymous usage statistics
  • Payment Processors: For secure subscription payments (we never store card details)

7. Your Rights (GDPR Compliance)

Under GDPR and UK data protection laws, you have the following rights:

Access Request a copy of your personal data
Rectification Correct inaccurate personal data
Erasure Request deletion of your data ("right to be forgotten")
Portability Export your data in a machine-readable format
Object Object to processing based on legitimate interests

8. Cookies

We use essential cookies for:

  • Session management and authentication
  • CSRF protection for form security
  • User preferences and settings

We also use Google Analytics cookies for anonymous usage statistics, which you can opt out of using browser extensions.

9. Contact Us

For privacy-related enquiries or to exercise your rights, please contact us at:

Email: privacy@myssl.info

Data Protection Officer: dpo@myssl.info

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will send email notifications to registered users.