Back to TLSight

Privacy Policy

Last updated: 2026-05-17

TLSight is a free TLS configuration scanner. This policy explains what data we collect and why.

1. What we collect and why

• Domain name you submit for scanning — to perform the scan you request.
• IP address — hashed and used only for rate limiting (10/min, 100/day).
• Consent preference — stored in your browser (localStorage) to remember your cookie banner choice.

Legal basis: performance of a service you request (scanning), legitimate interest (abuse prevention), and consent (advertising cookies).

2. What we do not collect

• Scan results are returned to you and not stored on our servers.
• We do not collect names, emails, or accounts.

3. Third parties

• Google AdSense serves ads and may place cookies for personalization, fraud prevention, and frequency capping.
• Google Fonts provides typography (loaded from Google CDN).

See /cookies for the full cookie breakdown.

4. Your rights

• You may request access to, correction of, or deletion of any data we hold.
• You may withdraw ad consent at any time by clearing localStorage for this site and reloading the page.
• You may lodge a complaint with your local data protection authority.

5. Retention

• Scan results: not retained.
• Rate-limit counters: 24 hours (in-memory only).
• Consent preference: until you clear your browser storage.

6. Security

SSRF protection, input validation, and rate limiting prevent abuse. HTTPS is enforced in production.

7. Changes

This policy may be updated. The latest version is always available here.

Contact

For questions about this policy, contact support@tlsight.com.