Privacy Policy
Last updated: 2 October 2026
GetYourSSL ("we", "us", "our") operates the website getyourssl.com. This policy explains what information we collect, how we use it, and your rights regarding that information. We are committed to protecting your privacy and handling your data transparently.
Who we are
GetYourSSL is an independent informational and affiliate website that helps visitors choose SSL/TLS and digital certificates. We do not sell certificates ourselves; purchases are completed on SSL.com. For any privacy question, contact us at info@getyourssl.com.
Information we collect
- Information you provide: when you use our SSL Expiry Reminder tool, we collect the domain name and email address you submit, solely to send you the requested expiry notification. We do not use this data for any other purpose.
- Tool usage data: our free SSL tools (SSL checker, CA chain matcher, decoder, etc.) send domain names or PEM data to our API server over HTTPS in order to perform the requested check. This data is not stored after processing.
- Optional anonymous page tracking: only after you accept, we record page URLs without query strings or fragments and may include a query-free referrer plus time zone. A random identifier associates those visits with an exit referral to an affiliate destination. It does not identify you as a customer or confirm a purchase. Your consent preference is stored for 180 days and the random visitor ID for 90 days. You can reject or change your choice using the privacy choices control on any page.
- Server logs: our servers may retain standard access logs (IP address, page requested, timestamp) for security and operational purposes. These are not linked to any personal identity and are purged periodically.
- Affiliate request diagnostics: affiliate navigation and explicitly identified prefetch/preview requests may be logged with a per-request ID, UTC time, product/source page, network address candidates and forwarding headers, browser identity and fetch metadata. A candidate address is not treated as verified when the proxy path is unknown. These diagnostics do not create a visitor cookie or prove a human visit or purchase. The diagnostic retention target is 30 days, with expired records removed when the service next runs its cleanup. Optional page-visit identifiers remain consent-controlled.
What we do NOT collect
- Google Analytics and Hotjar are optional and run only after you accept; they are not loaded before permission.
- We do not use advertising or retargeting cookies.
- We do not collect payment information — all purchases are processed directly by SSL.com.
- We do not sell, rent, or share your personal data with third parties for marketing purposes.
Cookies
Optional anonymous page tracking uses a consent preference cookie (180 days) and random visitor ID cookie (90 days) only after acceptance. Google Analytics and Hotjar are likewise enabled only with consent. See our Cookie Policy for details and to change your choice.
Affiliate links and third parties
Our site contains affiliate links to SSL.com. When you click an affiliate link and make a purchase, SSL.com processes the transaction and your payment information directly — we never see or store your payment details. SSL.com's own privacy policy governs that process. We may receive a commission, which does not affect the price you pay. See our Affiliate Disclosure.
Legal basis (EU/EEA visitors)
For visitors in the European Union and European Economic Area, we process personal data on the basis of our legitimate interest in operating and improving the website, and your voluntary submission when using the expiry reminder tool.
Your rights
Depending on your location, you may have the right to access, correct, or delete the personal data we hold about you, and to object to or restrict processing. To exercise any of these rights, email us at info@getyourssl.com. EU/EEA residents also have the right to lodge a complaint with their local data protection authority.
Data retention
SSL expiry reminder records (domain + email) are retained only until the reminder has been sent or cancelled. Server access logs are purged within 90 days.
Changes to this policy
We may update this policy from time to time. The "last updated" date above reflects the latest revision.