Terms of service

Draft for review. Version of 13 Oct 2026. These terms cover the free check and the free watch as they run today. They are checked by a lawyer before paid plans start.

1. The service

TTLwatch is provided by the provider named in the legal notice. The free check reads a domain's public certificate history and the certificates its servers send, and gives an assessment of its certificate renewals. It needs no account and costs nothing.

The free watch checks up to 10 endpoints you name, about twice a day, and mails you when a finding opens and once a week. It needs an account, which you create by signing in with your email address. It costs nothing.

2. What the results are

The check and the watch show what our server saw at the time. Renewal rhythms and forecasts are inferences from public logs and are labelled as such; we cannot see your servers' configuration or your renewal client. Results can be incomplete, for example when the public log search is behind or unavailable, or when different servers answer for the same name. Use them as a prompt to check your setup, not as a guarantee that it works or fails.

The watch is not an uptime monitor and comes with no on-call promise. An alert can come hours after the event it reports; certificates that live less than 10 days are watched on a best-effort basis. Keep your renewal client's own error reporting switched on.

3. Your account

• One account per email address, for you or your organisation. Keep access to the mailbox: it is how you sign in.
• Only watch endpoints you run, or that you are allowed to check. We connect to them as any visitor would, on the ports you name, and we refuse addresses that are not public.
• You can download everything we store about your account and delete it at any time on the account page. Deleting is immediate and cannot be undone.

4. Fair use

• Use the check and the watch through their web pages. Do not automate them, get around their limits or the proof-of-work, or use them to put load on servers.
• Do not use them to probe networks or hosts you are not allowed to examine. They only read what any client of a public TLS server can see.

We may limit or refuse checks, pause endpoints or close accounts that break these rules, to protect the service, the outside sources it uses and the servers it connects to.

5. Availability and changes to the free service

The free check and the free watch are offered as they are, without a promised availability. They depend on outside sources such as the public Certificate Transparency search, which can be slow or unavailable. We may change or end the free watch; we tell account holders by mail at least 30 days before we end it.

6. Liability

We are liable without limitation for intent and gross negligence, for injury to life, body or health, and under the German Product Liability Act. For slight negligence we are liable only for breaches of essential obligations, limited to the damage that is typical and foreseeable for this kind of service. Otherwise our liability for slight negligence is excluded.

7. Changes

We may change these terms for the future. Without an account, the terms on this page at the time of a check apply. With an account, we tell you of changes by mail at least 30 days ahead; if you keep using the watch after that, the new terms apply, and you can delete your account at any time instead.

8. Law

German law applies. If you are a consumer, the mandatory consumer protection rules of the country where you live still apply.