Skip to content

Privacy Policy

Original document

LAST VERIFIED 2026-10-01

ATTENTION POINTS · 14 TO CHECK · HEURISTIC, NOT LEGAL ADVICE

GDPR / UK-GDPR

7/13 ADDRESSED
  • Who controls your data (identity & contact of the data controller)GDPR Art. 13(1)(a)
  • Data Protection Officer contactGDPR Art. 13(1)(b)
  • How long your data is kept (retention)GDPR Art. 13(2)(a)
  • Whether providing your data is required, and what happens if you don'tGDPR Art. 13(2)(e)
  • Automated decision-making or profilingGDPR Arts. 13(2)(f), 22
  • Where your data was obtained, if not collected from you (source)GDPR Art. 14(2)(f)

CCPA / CPRA

2/10 ADDRESSED
  • Notice at collection: what categories of data are collected, and whyCCPA §1798.100(b)
  • The business or commercial purposes for collecting/selling/sharingCCPA §1798.110(c)
  • Categories of third parties data is shared/sold toCCPA §1798.115
  • A 'Do Not Sell or Share My Personal Information' option (if it sells/shares)CCPA §1798.135(a)
  • A 'Limit the Use of My Sensitive Personal Information' option (CPRA)CPRA §1798.135(a)
  • Your CCPA rights (know, delete, correct, opt-out, limit, non-discrimination)CCPA §§1798.100–125
  • A non-discrimination promise for exercising your rightsCCPA §1798.125
  • At least two ways to submit a request, plus a contactCCPA §1798.130

The Let's Encrypt Privacy Policy describes how we collect, use, and disclose your information in three different contexts: - When, as a Relying Party, you visit a web site secured with HTTPS that uses a certificate from Let's Encrypt, - When you are a Subscriber, i.e., when you request and use certificates from Let's Encrypt, - When you are a Visitor to the Let's Encrypt web site, community discussion forum, other web pages under letsencrypt.org, and third-party social media…

Show full text