Privacy

Last change: 14 November 2026

This tool is unusual among the ones on this site: it does send something to a server. Here is exactly what, and what happens to it.

What you send

When you press Audit, the address in the field is sent to this site's own Cloudflare Worker, and from there to the site you named. That is the whole of it. No name, no email, no account, no file.

What is stored

Nothing on our side. There is no database, no analytics, no log sink and no queue: the worker makes the request, returns the answer to your tab, and forgets it when the request ends. There is no table of audited addresses to leak, because there is no table.

Two things stay in your browser: the theme and the interface language, in localStorage under pikkola.ssl.theme and pikkola.ssl.lang. The address you last audited is put in the page URL so the result can be linked, which means it also sits in your browser history. Clear the site data to remove both.

What the audited site sees

One GET request from Cloudflare's network, with a normal desktop browser user agent and an Accept-Language header. It does not come from your connection, so the site cannot tie the request to your IP address or your location. If the site is behind Cloudflare too, the request stays inside Cloudflare's network and never leaves it.

Only the HTML is read, up to 512 kB, and only the head is parsed. Scripts, stylesheets, images and fonts are not requested.

Cookies and third parties

No cookies are set. No analytics, no advertising, no session recording. Fonts are served from this domain, not from a font network. There is no third party on the page, with one exception worth naming: an og:image from the audited page is loaded by your browser to show the preview, so that one image request goes from you to the audited site, exactly as it would if you had opened the page.

The network underneath

The site is served by Cloudflare Pages and the audit runs in a Cloudflare Worker. Cloudflare operates the network and its own operational and security logging applies to traffic the way it does for any site behind it. We do not add to that, and we cannot read those logs.

Children and rights

No account is created and no personal data is collected, so there is no profile to access, correct or delete. If you believe something here has handled your information badly, write to the address below and it will be answered by a person.

Contact

hello@pikkola.com

Back to the audit