Privacy
The short version: the tools on this site never transmit what you paste into them, and the rest of the site collects aggregate analytics only.
The certificate tools
Every tool under /tools/ runs entirely inside your browser. Certificates, CSRs and
private keys you paste are parsed locally by JavaScript and never sent anywhere. There is no
upload, no logging and no storage — the data does not leave the tab.
This is enforced rather than promised. Each tool page ships a Content Security Policy containing
connect-src 'none', which instructs your browser to block every outbound network
request the page could attempt, including ones we might introduce by mistake. You can confirm it
yourself: open your browser's developer tools, switch to the Network tab, paste a certificate,
and watch that nothing is requested.
Analytics scripts are not loaded on tool pages at all, for the same reason.
Analytics
Content pages use Cloudflare Web Analytics to count page views and referrers. It sets no cookies, records no identifiers, and builds no profile of you — the data is aggregate only, and is neither sold nor shared. It is not loaded on the certificate tool pages.
Cookies
The site itself sets no cookies. Your theme preference is stored in
localStorage under the key cg-theme, which stays on your device and is
never transmitted. The analytics described above set no cookies of any kind.
Data requests
Because no accounts exist and no personal data is collected directly, there is generally nothing to export or delete. For any question about this policy, the contact page has an address.