Privacy Policy

What we collect

HTTPS Checker is a free tool. You don’t need to create an account or log in. When you check a domain, the domain you enter is sent to our servers so we can run the redirect, SSL, and security-header checks.

Report storage: when you run a check, we may store the domain, the check result (e.g. redirect chain, SSL grade, security headers), and the date of the check, so we can show a stable report page at /report/{domain} and include it in our sitemap. We only store a report when the domain is reachable over HTTPS (we do not store results for unreachable domains or when the server returns rate-limiting). Report pages are public and indexable. If you want a report removed, use the Contact page or the "Request removal" link on the report page. We do not link stored reports to you personally. Server or proxy logs may temporarily contain request data; we do not use this data to identify you, build profiles, or attempt to associate it with an individual.

We use Google Analytics to understand how people use the site (e.g. which pages get visited). That may include your IP address, browser type, and general location. Google’s policies apply to how they handle that data. We’re not in the business of selling or sharing your data with third parties for ads or anything like that.

Where required by law, analytics cookies are set only after your consent.

Third Parties

Your data may be processed by third-party services like Google Analytics and Cloudflare (for hosting and Functions) according to their own privacy policies. We do not control their data processing practices and encourage you to review their policies. Some data may be processed outside the European Union, subject to appropriate legal safeguards.

Cookies

Analytics may set cookies. We don’t use cookies for anything else—no tracking pixels or ad networks. You can block or delete cookies in your browser if you prefer; the checker will still work.

Legal basis & retention

We process data necessary to provide the checker (legitimate interest) and, where applicable, with your consent for analytics. Stored reports (domain + result + date) are kept so we can serve the report page and sitemap; each new check for the same domain overwrites the previous report. Report URLs are included in our sitemap only for checks from the last 30 days. Server and proxy logs are kept only as long as needed for security and operations, then removed.

Domain owner? If you want a report for your domain removed or made non-indexable, use the Contact page or the "Request removal" link on the report page. We will process such requests in line with this policy.

Your rights

Depending on where you live, you may have the right to access, correct, or delete your data, object to processing, or lodge a complaint with a supervisory authority. To exercise these rights, use the Contact page.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The current version will always be available on this page. Your continued use of the site after any changes means you accept the updated policy.

Contact

If you have questions about this policy, use the Contact page or contact us at [email protected].