Effective date: 2026-10-09
CertBeacon ("we", "us") respects your privacy. This policy explains what information we collect, how we use it, with whom we share it, and how we protect it. It applies to all users of the service, wherever you are located.
We never sell or rent your personal information. We share only the minimum data required with the service providers needed to operate the service (for example hosting, payment processing and email delivery). These providers process your data only to the extent necessary to provide those services.
Check history is retained by plan: 30 days on Free, 90 days on Pro, and 1 year on Max. A maximum of 10,000 records is kept per monitor, and the complete raw snapshot of each check is kept for the most recent 100 records. You can delete your account at any time from Settings, which permanently removes your account, monitors and related data; you can also request deletion by email. Payment and invoice records may be retained by our payment provider for as long as required by law.
We protect your data with encryption in transit (TLS), salted password hashing (PBKDF2-SHA256, 100,000 iterations), least-privilege access controls, and industry-standard infrastructure protection. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
We store an authentication token in your browser storage to keep you signed in, and our hosting provider may set essential cookies for security and performance. These are required for the service to work and cannot be turned off. With your consent we also use Microsoft Clarity, a third-party analytics service that records anonymised sessions and heatmaps so we can see how the site is actually used and improve it. Clarity may set analytics cookies and process your IP address and interaction data on Microsoft servers. Clarity only loads after you click "Accept" on the cookie banner, and you can decline it without losing any functionality, or withdraw consent at any time by clearing your browser storage for this site. We do not use advertising cookies, and we do not sell your data.
If you are located in the European Economic Area (EEA) or the United Kingdom, the GDPR applies to your personal data. The data controller is CertBeacon (operated by the owner of domain 1201126.xyz).
Legal basis: we process your account and monitoring data to perform our contract with you (Art. 6(1)(b) GDPR), and we send service and alert emails based on our legitimate interests (Art. 6(1)(f) GDPR).
Under the GDPR you have the right to access your personal data, rectify inaccurate data, request erasure (right to be forgotten), restrict or object to processing, receive your data in a portable format, and withdraw consent at any time where we rely on consent. You can delete your account directly from Settings, or email [email protected] to exercise any of these rights.
International data transfers: your data may be processed by service providers located outside the EEA (for example hosting, payment and email providers). Where transfers occur, we rely on appropriate safeguards, including the European Commission Standard Contractual Clauses.
You also have the right to lodge a complaint with your local supervisory authority (for example your national Data Protection Authority).
If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) may give you the right to know what personal information we collect, request deletion, and opt out of the sale or sharing of personal information. We do not sell or share your personal information, and we will not discriminate against you for exercising these rights. To make a request, email [email protected].
Our service is not directed at children under 16 (or under 13 in the United States), and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at [email protected] and we will delete it.
Questions about this policy, or requests under GDPR or CCPA/CPRA? Contact us at [email protected].