The fine print

Privacy

• No account, no email, no tracking cookies. No analytics services. Fonts and the shop's own scripts are served from this site; the only outside service a page loads is the banner ad from adengine.us on the public pages, described under Advertising. It also counts one page view per page as a daily total.
• Stock sheets hold public log data only, at a random private address, for 7 days (longer while a Stock Book uses them).
• Stock Books hold the domains you add, their counts and alerts, and your expected-issuer list. The book key is stored only as a salted hash. A book not opened for 400 days is deleted unless a Shop Pass is running.
• Cookies: a form-security cookie, a session cookie, and (if you start or open a Stock Book) the book cookie. All are first-party and HttpOnly.
• Addresses: your IP address is not stored. Daily limits use a salted hash of it, deleted after 2 days. Server logs are kept by the host for operations.
• Outside services: the shop sends the domain you count to crt.sh (Sectigo) and, if needed, to Cert Spotter (SSLMate). It sends nothing about you. Your browser also loads the AdEngine banner on the public pages (below).
• Payments (once open) are handled by PayPal; the shop keeps only the subscription reference and dates.

Advertising

The public pages of YourSSL Shop (home, the stocktake form, shelf life, prices and how the shop works) show one banner ad from AdEngine (adengine.us), the small ad network run by WeldonPC, the company behind this site. For now the ads are for WeldonPC's own services, which include web hosting. Stock sheets, the Stock Book and its pages, feeds, this page and the terms show no ad.

To show an ad, your browser loads a script from adengine.us, asks it for one banner, loads the banner image, and reports once that the page was viewed and once that the banner was shown. Like any website, adengine.us receives your IP address, your browser type and the address of this site with those requests. It receives no domain you count and no stock sheet address.

• No cookies, no profile. AdEngine sets no cookies, gives you no ID and does not track you from site to site.
• How your IP address is used. adengine.us looks up the approximate city for your IP address in a location database kept on its own server (nothing is sent to anyone else), so that ads meant for one area are shown only there. It also uses the address to count each ad view or click only once and to leave out robots and WeldonPC's own office traffic. The address is not stored with the counts; the temporary entries made from it expire within six hours and are cleared from the server within two days.
• What is kept. Daily totals only: page views for this site, and views and clicks for each ad. The adengine.us web server also keeps a standard access log (IP address, time, address requested, referring site, browser) for security; it is deleted on a rolling schedule.
• Clicking an ad passes through adengine.us, which counts the click, and then opens the advertiser's site, which has its own privacy policy.
• Nothing about you is sold or shared.

Questions

About this page or what is kept: Contact WeldonPC. Never send a Stock Book link; anyone holding it can open the book.