Privacy
Updated: 7 November 2026
Controller
The controller responsible for personal data processing on this website is:
Sascha ReißnerAuf dem Klingenberg 48
21698 Harsefeld
Germany
Service delivery and hosting
This private service runs on an operator-owned server at the Surfplanet GmbH data centre in Cologne, Germany. Your IP address, requested URL and technical HTTP data are processed to deliver and securely operate the website. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is provision and availability of this technical service. The service cannot be delivered without the necessary connection data. The data centre provider supplies the infrastructure; certificate contents are not forwarded to external analysis services.
Certificate analysis
When automatic verification is enabled, pasted or imported certificates and the optional hostname or IP address are sent to this server after a brief input pause. If automatic verification is disabled, transmission occurs only when you select “Verify”. A selected file is read as text in the browser; its filename is not transmitted. Certificates may contain names, email addresses and other personal data. Submit only data you are authorised to process and do not submit private keys. Data is used exclusively for the requested analysis. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is providing the requested certificate verification.
Retention and abuse prevention
The application has no user accounts and retains no analysis history. Inputs and results are processed in memory during the request. OpenSSL uses temporary files in the service’s private RAM filesystem (Docker or systemd), deleted after verification. Following a forced process termination, files may remain in RAM until automatic cleanup (within approximately two minutes while the service is running) or a service restart. Browser content remains until cleared or the page is left; browser restoration and operating-system swap are outside the application’s control.
The supplied public web server configuration disables access logs and discards this service’s error logs. The application does not log certificates or request bodies. To prevent overload, the web server temporarily keeps IP-related counters in memory; these do not create a persistent browsing history. The legal basis is Article 6(1)(f) GDPR, with the legitimate interest of maintaining service availability. These statements concern this service and its intended web server configuration, not every network operator involved.
Cookies, language and appearance
The application sets no cookies and uses neither Local Storage nor Session Storage. Language is selected from the HTTP Accept-Language header: German when preferred among supported languages, otherwise English as fallback. Language and appearance can be changed using the controls and are kept only in the page URL and transient page state. “System” uses the browser’s colour scheme preference. No usage profiles or fingerprint identifiers are created. Fonts, scripts and styling are served locally; external links connect to their providers only when clicked.
Contact by email
When you contact us, your email address, message and delivery metadata are processed to handle your enquiry. Email providers involved in delivery participate in this processing. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is responding to the enquiry. Messages are deleted once processing is complete and they are no longer required for follow-up, unless statutory retention requirements or necessary legal proceedings require otherwise.
Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on consent, it may be withdrawn for the future. No solely automated decisions with legal or similarly significant effects are made. Privacy enquiries may be sent to the email address above.
Right to object
You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. Processing will then cease unless overriding compelling legitimate grounds exist or processing is necessary for the establishment, exercise or defence of legal claims.
Right to complain
You may lodge a complaint with a data protection supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement. For the operator in Lower Saxony, the State Commissioner for Data Protection of Lower Saxony is a point of contact.