PRIVACY

No tracking. No accounts.
Your code is your business.

CertMon is built for developers who care about security and privacy. No tracking: no identifiers, no usage events, no crash reports, no account. The app does not log your traffic or track how you use it; its daily update check says only which version you have and its license state. The website uses Google Analytics to count visits.

The only network requests CertMon makes

1. License activation and validation: When you purchase and activate a license key, CertMon communicates directly with our payment processor, Polar (api.polar.sh), to verify that the key is valid and track activations against your 3-Mac limit. No site names, project paths, or code metadata are sent.
2. Purchases: Polar is the merchant of record; we see your email and license key, never card details. After you buy, Polar shows you a discount code for our other apps. We send no other email.
3. Update checks: About once a day, CertMon asks updates.uresk.net whether a newer version exists. The request says which version of CertMon you have and one word for its license state: in trial, licensed, trial ended, or license needs attention. We add that to a daily count per version and state — that count is all we keep. We don’t store your IP address or anything else that could tell your Mac apart from anyone else’s. Updates themselves still download from GitHub. You can turn off automatic update checks in CertMon’s dashboard under Settings → Updates → Check for updates automatically; Check for Updates in the menu bar still works either way.

What stays 100% on your machine

• Certificates & Private Keys: Your Root CA private key is generated locally and stored exclusively in your macOS Login Keychain. CertMon never exports or transmits private keys.
• HTTP Traffic & Request Logs: CertMon’s reverse proxy terminates TLS and routes bytes between your browser and local ports entirely in memory on 127.0.0.1. No request bodies, headers, cookies, or URLs are sent over the network.
• Project Discovery: Process paths, Git repository names, and listening ports are inspected using macOS kernel APIs (libproc) and never leave your Mac.

Website analytics

getcertmon.com uses Google Analytics to count visits and see which pages are read; the app sends us nothing beyond its update check. Server logs generated by Cloudflare are retained for standard operational diagnostics and DDoS mitigation in accordance with Cloudflare’s privacy policy.

Questions?

If you have any questions about this privacy policy, email [email protected].