Privacy Policy

Certly is a service operated by IncreoScale ("we", "us", or "our"). We are committed to protecting your privacy. This policy explains what information we collect when you use Certly and how we handle it.

Information We Collect

• Account information (email address) — provided through our authentication provider when you sign up
• Monitoring configuration — the domains and hostnames you choose to monitor, and your notification settings
• Check results — SSL certificate and domain expiry data we observe for the sites you monitor, and the history of those checks
• Billing information — handled by our payment processor; we do not store your card details
• Technical information (browser type, version, IP address) collected automatically when you use the service
• Usage information — which pages you visit and which features you use, recorded against a random identifier stored in a cookie. We do not store your email address or IP address alongside this data

What Certly Monitors

• We connect to the domains and certificate endpoints you explicitly add as monitors to read publicly available expiry information
• We only monitor the sites you configure — we do not crawl or scan domains you have not added
• We do not collect or store the content of your websites; we record only certificate and domain metadata (such as expiry dates and status)

How We Use Information

• To provide the monitoring service and send you expiry alerts
• To manage your account, plan, and authentication
• To process subscription payments and renewals
• To provide customer support and improve the service
• To understand how Certly is used in aggregate, so we can decide what to build and fix next

Cookies and Analytics

We use a small number of cookies to measure how Certly is used. They are not used for advertising, and we do not sell or share this data with advertisers. The cookies we set ourselves are HttpOnly, which means the code running in your browser cannot read them.

cid

Tells one browser apart from another so we can count how many people use Certly and whether the product is actually helping them. It holds a random identifier only — nothing that names you.

Lifetime: 400 days · Set by: Certly

sid

Marks that a visit is already under way, so one continuous visit is counted once instead of once per page.

Lifetime: 30 minutes · Set by: Certly

uid

Set only while you are signed in. Records which account this browser belongs to, so your activity is not double-counted as a separate anonymous visitor.

Lifetime: 400 days · Set by: Certly

_ga

Measures aggregate site traffic — which pages are visited and where visitors arrive from. Governed by Google’s own cookie policy.

Lifetime: Determined by Google · Set by: Google Analytics

You can clear or block these cookies in your browser at any time. Certly's monitoring and alerting work exactly the same either way — blocking them only means your usage is not counted.

Information Sharing

We do not sell your personal information. We share it only with the service providers needed to operate Certly:

• Clerk — authentication and account management
• Polar.sh — payment and subscription processing
• Cloudflare — application hosting, edge compute, and database
• Google Analytics — aggregate website traffic measurement

We may also disclose information when required by law or with your consent.

Data Retention

• We retain your account and monitoring data for as long as your account is active
• Check history is retained according to your plan (no history on Free, 90 days on Pro, 1 year on Business)
• Individual usage records — which page was viewed, which check was run — are deleted within 91 days, leaving only daily totals that cannot be traced back to a single browser
• One row per browser is kept for longer, so we can tell returning use from new use. It holds the random identifier from the cid cookie, the dates of the first and most recent visit, the date you first set up monitoring if you did, and — if you were signed in — a reference to your account. It holds no browsing history and no contact details. Deleting your account removes the reference to it, and a browser that only ever visited once has its row removed with the usage records above
• When you delete your account, your account and all associated data — monitors, check history, notification channels, and logs — are permanently removed

Your Rights

• Access the personal information we hold about you
• Request correction or deletion of your data
• Delete your account at any time from your account settings, which permanently erases your data
• Object to certain processing of your data

Security

We take reasonable and appropriate measures to protect your information against loss, misuse, and unauthorized access. No method of transmission or storage is completely secure, but we work to safeguard your data and limit access to it.

Contact Us

For privacy-related questions, please contact support@certly.dev.