Privacy Policy
Last updated 13 October 2026
CertHalo is a free SSL certificate monitoring service built and run by IncubXperts TechnoConsulting Private Limited (“IncubXperts”, “we”, “us”, incubxperts.com). This policy explains what we collect when you use certhalo.com, why, and the choices you have. We keep it short because we collect little: we need your email address to send alerts, and we don't sell or rent anyone's data. Using CertHalo is also governed by our Terms of Service.
What we collect
- Your account
- Your email address, which is also how you sign in. We create a workspace for you when you first sign in.
- Domains you monitor
- The domain names and ports you add, and what our checks find: certificate details (which are public), grades, errors and a history of checks for the last 90 days. We also keep a log of the alerts we've emailed you.
- Signing in
- Sign-in links work once and expire after 15 minutes. We store only a one-way hash of each link and of your session, never the link or session itself.
- Security
- Your IP address, used briefly to limit how many sign-in emails can be requested, so nobody can flood an inbox. It's deleted automatically within about two hours.
- Email delivery
- Whether our emails to you were delivered, bounced or marked as spam. If they bounce or are marked as spam, we stop sending alerts to that address until you turn them back on.
- Free SSL checker
- When you check a site without signing in, we look up its certificate and show you the result. We don't link the sites you check to you, and we keep results for a few minutes only so repeat checks are fast.
- Usage analytics
- Google Analytics and Microsoft Clarity record how visitors use the site: pages viewed, clicks, scrolling, the device and browser used, and an approximate location derived from the IP address. Clarity also produces session replays and heatmaps, with text typed into forms masked so it isn't recorded.
How we use it
- To run the service: check your certificates and email you sign-in links, expiry reminders and change alerts.
- To keep the service secure and reliable, and to stop abuse.
- To understand which features are used so we can improve CertHalo.
- To answer you when you contact us.
We don't sell your information, use it for advertising, or send marketing emails without asking first. Every alert email has a link to pause alerts in one click.
Who we share it with
We use a few service providers to run CertHalo. They process data on our behalf and only for the purposes above:
- Amazon Web Services
- Hosting, database and email delivery, in the United States (us-east-1).
- Cloudflare
- Domain name (DNS) services for certhalo.com.
- Google Analytics (Google's privacy policy).
- Microsoft
- Microsoft Clarity (Microsoft's privacy statement).
We may also disclose information if the law requires it, or to protect the rights and safety of our users or the service.
Cookies
| Cookie | Set by | Purpose | Lasts |
|---|---|---|---|
| ch_session | CertHalo | Keeps you signed in. Essential; set only when you sign in. | 30 days |
| _ga, _ga_* | Google Analytics | Counts visits and tells apart returning visitors. | Up to 2 years |
| _clck, _clsk, CLID | Microsoft Clarity | Groups the pages of one visit and tells apart returning visitors. | 1 day to 1 year |
| MUID | Microsoft | Identifies the browser across Microsoft services used by Clarity. | 1 year |
You can block or delete cookies in your browser settings; the site still works without the analytics cookies. You can also opt out of Google Analytics with Google's opt-out browser add-on.
How long we keep it
We keep your account and monitored domains until you delete them or ask us to delete your account. Check history is deleted after 90 days, sessions after 30 days, and unused sign-in links after 15 minutes. When you ask us to delete your account, we delete it and its data within 30 days, except where the law requires us to keep something longer.
Your rights
Depending on where you live (for example the EU, the UK, India or California), you may have the right to see the personal data we hold about you, correct it, delete it, get a copy of it, or object to how we use it. To do any of this, email support@certhalo.com from the address on your account. We'll reply within 30 days. You can also complain to your local data protection authority.
Security
The site is served only over HTTPS, the database is encrypted at rest, sign-in links and sessions are stored only as hashes, and access to our systems is restricted to the people who run the service. No system is perfectly secure, but we work to protect your information and will tell you promptly if a breach affects you.
International transfers
CertHalo's data is stored in the United States. IncubXperts and its service providers may access it from other countries, including India. Wherever it is processed, we protect it as this policy describes.
Children
CertHalo is a tool for website owners and isn't meant for children under 16. We don't knowingly collect their information.
Changes to this policy
If we change this policy, we'll update the date at the top. For significant changes, we'll also email account holders before they take effect.
Contact us
Questions about privacy? Email support@certhalo.com or write to us:
IncubXperts TechnoConsulting Private LimitedOffice No 1, Level 5, Building B1, Symphony IT Park, Nanded City, Pune, Maharashtra 411068, India
You can also manage your alerts from your dashboard.