Privacy policy
This policy explains what CertLark collects, why, and what you can ask us to do about it. CertLark is early access today: the public pages and an email list are live, and the checker, dashboard, alerts and checkout open later. Where a section describes something that is not live yet, it says "when this feature is live".
Who we are
Quietlathe LLC, 2800 E. Enterprise Ave Ste 333, Appleton, WI 54913. Email: ops@quietlathe.com. We are the controller of the personal data described here.
What we collect today
- Site visits. Our hosting provider, Cloudflare, processes request data such as your IP address and browser user agent to serve and protect the site. We do not run analytics.
- The early-access list. If you join, we store the product (CertLark), your email address, the plan you picked if any, the page you signed up from, a timestamp, and a one-way hash of your IP address used only for spam rate limits. We do not send any email now. When the product opens we send one email to the list. You can ask to be removed any time at ops@quietlathe.com. We never sell or share the list.
- Email you send us. If you write to ops@quietlathe.com, we keep the message and our reply to answer you.
Cookies and local storage
The site sets no cookies today and does not use local storage or session storage. When accounts are live, we expect to set one sign-in cookie to keep you logged in, and we will update this page.
What we will collect when features are live
- Free bulk checker. When this feature is live, the domains you paste are sent to our server so it can run the checks. We keep your IP address briefly to enforce the hourly limit. We do not store the domains you check there unless you have an account.
- Accounts and the dashboard. Your email address, the domains you add, check results and history, client names and branding fields (agency name, logo URL, accent color), and plan status.
- Alert emails and reports. Your email address and the alert content go to our email provider to be delivered.
- Payments. When checkout opens, payments will be processed by Stripe. We never see or store full card numbers. We keep billing status, plan and invoice records.
Why we use it
To run the site and keep it secure, to send the one launch email to the early-access list, to answer your messages, and, when live, to run the checks you ask for, send alerts and reports, bill you and keep records we need for taxes and disputes.
Who else handles data
- Cloudflare (hosting, Functions and a D1 database) now. Cloudflare privacy policy.
- Stripe (payments), when checkout opens. Stripe privacy policy.
- Resend (delivering alert emails), when alerts are live. Resend privacy policy.
The checks themselves read public sources: Certificate Transparency logs (crt.sh), public TLS handshakes and public domain registry (RDAP) records. When the checker is live, the domain name you enter is sent to those public services to look it up. We do not access your or your clients' servers or content beyond a standard HTTPS connection to the domain. We do not use any AI provider.
We do not sell personal information and we do not share it for cross-context behavioral advertising. We may disclose data if the law requires it or to protect our rights.
Retention
Early-access entries are kept until we send the launch email and for a reasonable time afterwards, or until you ask us to remove them. Rate-limit hashes are kept briefly. When accounts are live, check history is kept while your account is active, and billing records as long as tax and accounting law requires. Email ops@quietlathe.com to delete your data.
Security
Data is held with Cloudflare and traffic uses HTTPS. We limit who can access it. No system is perfectly secure, so we cannot promise absolute security.
California privacy rights (CCPA/CPRA)
If you are a California resident you can ask us to tell you what personal information we hold about you and how we use it (right to know), delete it, correct it, and limit or stop its sale or sharing. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of, and we do not use sensitive personal information to infer characteristics about you. We will not treat you differently for using these rights.
To make a request, email ops@quietlathe.com from the address that is on the list or account. We verify by confirming that you control that email address, and may ask a simple follow-up question. An authorized agent can make a request for you with your written permission; we may ask you to confirm it directly. We aim to reply within 45 days.
Visitors in the EEA and UK
Quietlathe LLC is the controller. Our lawful bases: your consent when you join the early-access list (you can withdraw it any time by emailing us); our legitimate interests in running and securing the site and preventing spam; performing a contract with you once you buy; and legal obligations for tax records. You have the right to access, correct, delete, restrict or object to our use of your data, to withdraw consent, and to receive your data in a portable form. You can complain to your local data protection authority. Email ops@quietlathe.com to use any of these rights.
International transfers
We are in the United States and our providers may process data in the United States and other countries. If you use the site from outside the US, your data will be transferred there. Where the law requires a transfer safeguard, we rely on the one our provider offers, such as standard contractual clauses.
Children
CertLark is for businesses and is not directed to children under 13. We do not knowingly collect data from them. For visitors in the EEA and UK, we do not knowingly collect data from anyone under 16. If you think a child has given us data, email us and we will delete it.
Changes
If we change this policy we will post the new version here with a new date. If a change is significant we will tell the early-access list by email.
Contact
Quietlathe LLC, 2800 E. Enterprise Ave Ste 333, Appleton, WI 54913. ops@quietlathe.com