I built CertFleet because the alternatives were too expensive.

MCS (currently being incorporated)
5Q Avenue des Naudières
44800 Saint-Herblain, France

• Public checker: only the hostname you submit (no personal data, rate-limited + protected by Cloudflare Turnstile).
• Accounts: email address (from password signup or OAuth Google/GitHub), user ID.
• Monitored resources: the hostnames, ports, and full URLs you explicitly add to monitor (chosen by you).
• Alert channels: email addresses, Slack webhook URLs, or custom webhook URLs you configure.
• Technical data: minimal logs for rate limiting, abuse prevention and debugging (IP addresses are not stored long-term for the public checker).

We process data only to provide the monitoring and alerting service you requested (contract performance) and to prevent abuse. We do not sell data or use it for advertising.

• Primary storage: Cloudflare D1 (SQLite) and KV — global but with strong privacy controls.
• Emails sent via Resend (EU-friendly routing when possible).
• Passive TLS probe: short-lived requests only (hostname in, certificate details out). No storage of your traffic or content.
• Certificate Transparency data: fetched from public crt.sh (no personal data involved).

Check history and monitors are kept as long as the resource is monitored or until you delete it from your account. You can delete domains, monitors, or your entire account at any time from the dashboard. Alerts are idempotent (we track what was already sent to avoid duplicates).

You have the right to access, rectify, erase, restrict processing, data portability, and to object. For any request, contact us at the address above or via the support channels in the app. We will respond within legal timeframes.

• Passive TLS reading only — we never scan ports or attempt exploitation.
• Auth sessions stored in KV with short TTL, httpOnly + Secure cookies.
• Public checker protected by Turnstile + per-IP rate limiting in KV.
• No unnecessary third-party analytics or trackers on the landing or app.