What we collect
Only the minimum:
- Email address - if you register. Needed to link your account, API key and alerts.
- Alert subscriptions - which certificates you follow.
- API usage - number of calls per day, per API key. For rate limits and abuse detection.
What we do with it
Only what's needed to run the service:
- Send login links and alerts (via SMTP2Go, EU).
- Keep you logged in (session cookie, purely functional).
- Enforce fair-use limits on the API.
We don't sell anything, share nothing with third parties, and don't track outside Certmap itself.
Cookies
We use one cookie: cm_session. It proves you're logged in and expires after 30 days. No tracking, no analytics, no advertising.
Delete data
Email info@certmap.eu from your registered address with "delete my account". Gone within 5 business days. Backups roll off within 90 days.
Certificate data source
All certificate data comes 1-to-1 from iscc-system.org. Certmap is not affiliated with ISCC System GmbH. For the authoritative version of a certificate, always consult the ISCC register itself.
Controller
Certmap is operated by TransportPlan B.V., based in the Netherlands. CoC: 3628725. Contact: info@certmap.eu.