Privacy
This page is the service. You name a host, our server connects to it, and we show you the certificate and TLS configuration it presented. That is all.
What we read
Two things. Your public IP address, which arrives with every request, and the hostname and port you enter. The IP address is used once per inspection, to help decide whether you are a person rather than a script. It is not looked up, profiled or tied to the hosts you inspect.
Where the hostname goes
To a public DNS resolver, to find the host's address, and then to the host itself: our server opens a handful of TLS connections to it and, on web ports, asks for one page's headers. The host sees our server's address. It never sees yours. The hostname is also part of the report page's address, which is what makes a report shareable.
The one cookie
Passing the check sets a cookie named tlsxray_clearance, so you are not challenged again for every inspection. It lasts 15 minutes and holds an expiry time and a signature of it, nothing else: no identifier, nothing about you or what you looked up. The site does not work without it, which is why it is set without asking. There are no analytics, no advertising and no tracking cookies.
What we keep, and for how long
Nothing. A inspection is run, shown and forgotten. No result is written to disk or to a database, and the origin's logs record neither client addresses nor the hostnames people enter. There are no accounts.
What stays on your device
Theme preference and whether you dismissed the notice are stored in localStorage in your browser. They are not cookies and they are not sent to us.
Who else may see your IP
Traffic reaches this site through Cloudflare, so Cloudflare sees the connection, including the address of the result page you open. The human check is Cloudflare Turnstile, which runs in your browser and receives your IP address from us when we verify its answer. No host we inspect is told who asked.
Retention
Nothing about your visit outlives the request, so there is no stored record to access or erase. Cloudflare operates its own edge logs; we do not keep a copy of those.