Privacy Policy

SSLChange (https://sslchange.com) is a free tool that helps you get SSL/TLS certificates from Let's Encrypt. This policy explains what we collect when you use the website and why.

Information you give us. When you generate a certificate, you enter:

• Your email address.
• The domain names the certificate should cover.
• Your chosen verification method (DNS or HTTP).

Information collected automatically. Like most websites, our server and our network provider receive technical data such as your IP address, browser type and the pages you request. We use your IP address to apply rate limits that protect the service from abuse.

• To request, verify and issue your certificate through Let's Encrypt.
• To let you renew certificates later with the same email address.
• To prevent abuse, enforce rate limits and keep the service secure.
• To understand how the site is used and improve it.
• To reply when you contact us.

We do not send marketing emails, and we do not sell or rent your information.

To issue a certificate, we send your email address and domain names to Let's Encrypt (Internet Security Research Group). Let's Encrypt handles this data under its own Privacy Policy.

Please note that, like all publicly trusted certificates, every certificate issued is recorded in public Certificate Transparency logs. The domain names in your certificate will be publicly visible there. Your email address is not included in the certificate.

• Let's Encrypt account key. We keep an account key on our server, linked to your email address, so that future certificates and renewals use the same Let's Encrypt account.
• Your certificate's private key. It is created for your request and shown to you for download. We do not keep a copy after your certificate is delivered, so please store it safely.
• Rate-limit records. Short-lived records based on IP address, email and domain names, stored in a scrambled (hashed) form and deleted automatically within 7 days.
• Server logs. Standard technical logs kept by our hosting provider for security and troubleshooting, for a limited time.

SSLChange does not use login cookies. Your browser stores a few small settings locally: your light or dark theme, whether you closed the support banner, and the domains of your current request (cleared when you close the tab).

We use the following third-party services, which may set their own cookies or collect usage data:

• Google Tag Manager / Google Analytics to measure visits and usage.
• Cloudflare for content delivery, security and privacy-friendly web analytics.
• Google Fonts to load the fonts used on this site.
• PingChimp for website monitoring and analytics.

You can block or delete cookies in your browser settings. The certificate generator keeps working without them.

We share information only with Let's Encrypt (to issue certificates), with the service providers listed above (to run and protect the site), and when required by law. If you support us through Buy Me a Coffee, that payment is handled by Buy Me a Coffee under their own privacy policy.

The whole site uses HTTPS. Stored keys are kept outside public access, and we apply rate limits and other measures to protect the service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

You can ask us to delete the account key linked to your email address, or ask what information we hold about you, by emailing [email protected]. Depending on where you live, you may have further rights under laws such as India's Digital Personal Data Protection Act or the GDPR.

Certificates already issued, and their entries in public Certificate Transparency logs, cannot be removed by us.

SSLChange is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their information.

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated revision date.

Questions about privacy? Email us at [email protected]. See also our Terms of Service.