Skip to content

Privacy & cookies

The CertIntel website and this wiki remember your light/dark appearance using three cookies:

Cookie Purpose Lifetime
certintel_theme The look of the sites. There is one look and no choice, so the sites only write ground-station. A different value saved before the choice was removed is ignored, and replaced the next time you change the light/dark mode Up to one year
certintel_theme_mode Your light/dark appearance Up to one year
certintel_cookie_notice Your acknowledgment of the notice and whether to remember your appearance Up to one year

These cookies are shared between certin.tel and wiki.certin.tel. These preference cookies are not used for advertising or tracking and do not contain account information. Acknowledging the notice on either site dismisses it on both sites for the lifetime of the acknowledgment cookie.

Change your choice

Use Cookie settings in the footer of either site to open the notice again and adjust or delete what is stored.

Turn Remember my appearance on or off and choose Save. With it off, saved appearance preferences are removed. You can still change the light/dark mode on the current page; a new page load will use the default appearance. We keep the separate acknowledgment cookie to remember this choice and avoid showing the notice again.

Choose Delete cookies to remove all three cookies, including the acknowledgment, from both sites. The page returns to the default appearance and the notice appears again, as on a first visit. Cancel closes the settings without changing anything.

If cookies are blocked, local browser storage is used where available. In that case, choices stay local to each site and cannot be shared between the website and wiki. If all storage is blocked, choices last only for the current page. Clearing browser storage or cookie expiry may show the notice again.

The dashboard

These website cookies do not control the CertIntel dashboard. On plans with the Appearance feature, a signed-in user's light/dark choice and layout density are stored with their account (My appearance), not in a cookie. On the sign-in page and on plans without that feature, the dashboard remembers only your light/dark choice in a cookie of its own, also named certintel_theme, limited to the dashboard's own address and kept for up to one year. The tenant's colors and artwork are chosen by a tenant administrator. See Branding & appearance.

What the Agent sends to CertIntel

The CertIntel Agent runs on your own servers and reports to your workspace. It sends:

  • Its identity and state: the computer name, the Agent version, the operating system and architecture, its configuration lock and whether it applies dashboard proposals by itself.
  • Certificates it observes or manages: public certificate data (subject, names, issuer, thumbprint, validity dates, where it was seen) and the presented chain. See What is reported.
  • Renewals and installations: results, errors, the redacted end of a failed step's output (which can be turned off, see Failed step output) and, for a certificate that is not settled, when the Agent tries again.
  • The templates it carries, the ACME accounts configured on it, the names of its DNS-01 delegations and, on Windows with IIS, the names of its IIS sites, so the dashboard can offer a workflow form.
  • The servers it detected on its computer (Agent 1.9.0+): for each web or service endpoint that uses a certificate, the kind of server and where it was found, the names it serves and the port, the certificate file or Windows store, its thumbprint or fingerprint and expiry, and the template and settings detection suggests. It is on by default; turn it off on the device with certintel config set report-detected-servers=off. See Server detection.

It never sends a private key, a key's path, a keystore password, the content of a configuration file or a local API credential.

For other privacy or data-processing questions, contact CertIntel.