Privacy Policy

Last updated: September 17, 2026. This policy explains what data we collect and how we handle it.

These are placeholder terms for demonstration. Before going live, have this reviewed by qualified legal counsel and update it to reflect actual data practices.

1. Overview

FreeSSL ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect when you use ssl.menporulcs.com, how we use it, and what rights you have.

2. What We Collect

When you use the Service, we may collect:

  • Domain names you submit for certificate generation or lookup
  • Email address you provide when generating an SSL certificate (used only for Let's Encrypt expiry notifications)
  • IP address of your connection (standard server log)
  • Browser type and version (from User-Agent header)
  • Pages visited and timestamps (standard web analytics)

3. What We Do NOT Collect

  • Private keys — never stored, never logged, never transmitted
  • Generated passwords — browser-local only
  • CSR private key material — generated entirely in your browser
  • DNS TXT record challenge values after validation completes
  • Payment information (the service is free)

4. Browser-Local Tools

The following tools perform all operations entirely in your browser and send no data to our servers:

  • CSR Generator (private key & CSR generation)
  • Password Generator

You can verify this by monitoring the Network tab in your browser's developer tools while using these tools.

5. How We Use Data

  • To process SSL certificate requests via the Let's Encrypt ACME protocol
  • To provide domain verification challenges
  • To improve service performance and reliability
  • To detect and prevent abuse (rate limiting, SSRF protection)

We do not sell, rent, or transfer your personal information to third parties except as required to provide the service (e.g., submitting domain data to Let's Encrypt as part of the ACME protocol).

6. Data Retention

  • Certificate order state is retained only as long as needed to complete issuance (typically minutes to hours)
  • Server access logs are retained for up to 30 days for security and abuse detection
  • Email addresses provided for certificate generation are passed to Let's Encrypt and governed by their privacy policy
  • We do not create permanent user accounts unless you opt in to a monitoring feature

7. Cookies

We use a minimal cookie to remember your light/dark theme preference. No tracking or advertising cookies are used.

8. Third-Party Services

We use the following third-party services which may process data on our behalf:

  • Let's Encrypt / ISRG — Certificate issuance. Privacy Policy
  • Cloudflare DNS — DNS-over-HTTPS queries for the DNS Lookup tool
  • RDAP registries — Domain registration data
  • ipapi.co — IP geolocation data

9. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete personal data we hold about you. To exercise these rights, contact us at info@menporulcs.com.

10. Security

We implement technical and organizational measures appropriate to the sensitivity of your data, including HTTPS-only service delivery, rate limiting, SSRF protections, and minimal data collection principles.

11. Changes to This Policy

We may update this policy. We will update the "Last updated" date above when we do. Continued use after changes constitutes acceptance.

12. Contact

Questions about this policy: info@menporulcs.com