SSL Clock

Privacy policy

Last updated 12 Oct 2026

SSL Clock is run by StyleLine FZE, a company registered in the Sharjah Research, Technology and Innovation Park (SRTIP) Free Zone, Sharjah, United Arab Emirates ("we", "us"). This page explains what we collect, why, who helps us run the service, and the choices you have. Questions go to support@sslclock.com.

What we collect

  • Account details. Your email address and a hashed password. We never store the password itself.
  • Monitored hostnames. The hostnames and ports you add, and the results of our checks: certificate issuer, subject, names, validity dates, errors, and the domain registration expiry date.
  • Alert destinations. Extra email recipients, Slack and Microsoft Teams webhook URLs, your own webhook URL and its signing secret, and a PagerDuty integration key, if you add them.
  • Phone numbers for SMS. If you turn on SMS alerts, your mobile number, the time you verified it, and a count of texts sent this month and hour. Verification codes are stored only as a hash and expire after 10 minutes.
  • API keys. We store a hash of each key and its first characters so you can tell keys apart. We cannot show a key again after it is created.
  • Team members and invites. The email addresses you invite and their role.
  • Status pages. If you publish one, the address you choose. The page shows your monitored hostnames, their status and expiry dates to anyone with the link.
  • Billing. Your plan, subscription status, renewal date, and the card brand, last four digits and expiry date that Stripe shares with us. We never see or store the full card number.
  • Technical logs. Our hosting provider records request logs, including IP addresses, to keep the service running and secure.

The free checker

The free SSL checker on our website does not store the domains you check. It connects to the host, shows you the result and keeps nothing. Our hosting provider's request logs may still briefly record the request, as with any web page.

Why we use it

  • To check your certificates and domains and send the alerts you ask for.
  • To run your account, team and billing.
  • To send service emails: alerts, test messages, team invites, password resets, payment problems and, if you opt in, a monthly summary.
  • To keep the service secure and prevent abuse.

We do not sell your data and we do not use it for advertising.

Who helps us run SSL Clock

  • Vercel hosts the application and keeps request logs.
  • Neon hosts our Postgres database.
  • Stripe processes payments and stores your card details.
  • Resend delivers our emails.
  • Twilio delivers SMS alerts and verification codes, only when SMS is enabled and you add a number.
  • Public lookups. We look up your domains in public registration data (RDAP, through rdap.org and the registries it points to) and in public Certificate Transparency logs (through crt.sh). These requests contain the domain or hostname only, never your account details.
  • Your own integrations. Alerts you route to Slack, Microsoft Teams, PagerDuty or your own webhook are sent to those services under their terms.

These providers may process data outside the UAE. We share only what each one needs to do its job.

Cookies

We use only cookies the service needs to work: a session cookie that keeps you signed in, and a security cookie that protects forms against cross-site request forgery. No analytics or advertising cookies.

How long we keep data

  • Account data, monitors, check history and settings are kept while your account is open.
  • Removing a monitor deletes it and its check history. Removing a number, key, invite or status page deletes it.
  • Sessions expire after 14 days. Password reset links expire after use or after a short time.
  • When you ask us to delete your account, we delete your account data within 30 days. We keep billing records that tax and accounting law require us to keep.
  • Hosting logs are kept for the period set by our hosting provider.

Your choices and rights

You can view and change most of your data in the app, export your monitors as CSV, and remove monitors, numbers, keys and integrations at any time. To get a copy of your data, correct it, or delete your account, email support@sslclock.com from your account address. We reply within 30 days.

Security

All traffic uses HTTPS. Passwords, API keys and SMS codes are stored as hashes. Our outbound checks refuse private and internal network addresses. No system is perfectly secure, so if you find a problem, please tell us at support@sslclock.com.

Children

SSL Clock is a business tool and is not meant for anyone under 18. We do not knowingly collect data from children.

SMS

We use your mobile number only to send the alerts and verification codes you asked for. We do not share or sell mobile numbers or SMS opt-in data to third parties for marketing. See the SMS terms.

Changes

We will update this page when our practices change and change the date at the top. If a change is significant, we will email account owners before it takes effect.

Contact

StyleLine FZE, Sharjah Research, Technology and Innovation Park (SRTIP) Free Zone, Sharjah, United Arab Emirates. Email support@sslclock.com.