Privacy Policy for sslforfree.com
This website ("SSL For Free", sslforfree.com) is operated by ZeroSSL GmbH ("ZeroSSL", "we", "us"), the company behind zerossl.com, to introduce visitors to ZeroSSL's free and paid SSL/TLS certificates. This notice explains what happens to your data on this website. For everything else (your ZeroSSL account, certificate management, billing and support) please see the main ZeroSSL Privacy Policy.
1. What data is collected here
a) Analytics
We use Plausible Analytics, a privacy-focused, cookieless analytics tool. Plausible does not use cookies, does not store any identifiers on your device and does not track you across websites. It only collects aggregated, anonymized data: page views, referrer, approximate country or region (derived from the IP address, which is not stored), and device and browser type.
b) Cookie consent
When you first visit this website, a banner asks which cookies you accept. This is handled by Cookiebot, a consent management service provided by Usercentrics A/S (Denmark) on behalf of ZeroSSL. Cookiebot stores your choice in a cookie on your device so that you are not asked again on every page, and records your consent (with a timestamp and an anonymized IP address) as proof. Until you have chosen, only this consent tool and the cookieless analytics described above are active.
c) Statistics and marketing (only with your consent)
If you accept statistics and/or marketing cookies, this website loads Google Tag Manager (Google Ireland Limited), a tool ZeroSSL uses to manage measurement and marketing tags for zerossl.com and its related websites. Depending on your choice, these tags may set cookies or similar identifiers and may measure how you use this website and how visitors from advertising find ZeroSSL. If you decline, or have not chosen yet, Google Tag Manager is not loaded and this website sends no data to Google. You can change or withdraw your choice at any time through the cookie settings of this website; withdrawing does not affect processing that took place before. How ZeroSSL handles such data is described in the ZeroSSL Privacy Policy.
d) The domain you enter
If you enter a domain and click "Create Free SSL Certificate", your browser goes directly to ZeroSSL (manage.sslforfree.com) with that domain in the address, so the sign-up form can be pre-filled. This website does not receive, store or log the domain. From there, the ZeroSSL Privacy Policy applies.
e) Language suggestion
If your browser's language differs from the language of the page, we suggest the matching translation in a bar at the top of the page. This is worked out in your browser from its language setting; the setting is not sent to us and nothing about the suggestion is stored on your device. The suggestion appears again each time a page loads, and closing it only hides it until then.
f) Hosting
This website is hosted on Cloudflare Pages (Cloudflare, Inc., United States) and served through Cloudflare's global network. As with any website, basic connection data (e.g. IP address, timestamp, user agent) is processed there to deliver the pages.
2. Legal basis for processing
Analytics (Plausible): legitimate interest (Art. 6(1)(f) GDPR) in understanding aggregated, anonymous traffic. No personal identifiers are processed.
Cookie consent tool (Cookiebot): necessary to ask for and document your cookie choices (Art. 6(1)(c) GDPR in connection with the ePrivacy rules).
Statistics and marketing (Google Tag Manager and the tags it loads): your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Domain hand-over to ZeroSSL: carried out at your request to start the certificate sign-up (Art. 6(1)(b) GDPR).
3. Data recipients
Plausible Analytics (EU-hosted): aggregated, anonymized analytics data only.
Usercentrics A/S (Cookiebot): your cookie choice and the consent record described above.
Google Ireland Limited (Google Tag Manager): only if you consent to statistics or marketing, as described above.
ZeroSSL GmbH (manage.sslforfree.com): the domain you enter, if you submit the form, to start the certificate sign-up.
Cloudflare, Inc. (United States): hosting provider for this website. Processes standard connection and server log data only.
No data collected on this website is sold. Without your consent to statistics or marketing, no data from this website is shared with advertising or marketing providers.
4. Your rights
Under the GDPR, you have the right to access, correct, delete or restrict processing of your personal data, the right to data portability and the right to object to processing. You can also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde). Requests regarding your ZeroSSL account should be directed as described in the main ZeroSSL Privacy Policy.
5. Contact
ZeroSSL GmbH
Salzgries 19/3+4, 1010 Wien, Austria
support@zerossl.com
6. Changes to this notice
We may update this notice if the data collected on this website changes. Material changes will be reflected in the "Last updated" date above.