Privacy

Connections to api.certstream.dev pass through Cloudflare, which sees your IP address and request details under the Cloudflare privacy policy.

The server logs your IP address, the stream you picked, and when each connection opens and closes. We use these logs to enforce the per-IP connection limit and to find clients that abuse the service. Old entries are overwritten as the logs rotate, after about a week at current traffic.

Streams need an API key. When you sponsor and sign in with GitHub at api.certstream.dev/claim, we store your GitHub numeric id and login, your sponsorship tier and amount, when each key was created and last used, and the addresses each key connected from in the last 30 days. The addresses are used only to enforce the address limit and to spot shared keys. A key is shown once and only a hashed copy is kept. GitHub handles your payment, and we never see payment details.

Signing in sets one session cookie, used only on the claim and account pages. The streams set no cookies, and we do not sell or share any of this.

A key passed in the URL can appear in the request logs of Cloudflare, which sits in front of the API. Send it in an Authorization: Bearer header where your client allows it.

certstream.dev is hosted on Cloudflare Pages, which processes visitors' IP addresses under the Cloudflare privacy policy.

Google Analytics counts page views and sets cookies to do so, and fonts load from Google Fonts. Both follow the Google privacy policy.

The light or dark theme you choose is saved in your browser and never sent anywhere.

Questions about your data, or a request to remove your IP address from the logs: [email protected]. Bugs and feature requests go to GitHub issues.

Last updated November 5, 2026.