Give us up to five public domain names and an email address. We write to you 14 days and 3 days before each certificate expires. Each email also carries one line on the key exchange the site negotiated when we checked: hybrid post-quantum, classical, or TLS 1.2 only.
First, one email asking you to confirm. Nothing else is sent until you do. After that: one email 14 days and one 3 days before each certificate’s expiry date. Reply “stop” to any of them and we stop.
One TLS handshake a day, the same one a browser makes, from a single server in Hanoi. No login, no scanning, no crawling. A content delivery network can answer differently in another region, so the key-exchange line describes what we saw, not every visitor.
We sell cryptographic inventories. Certificates are the part of that anyone can see from outside, and a reminder that arrives on time is the simplest way to show we measure carefully. Each email has one line about our paid report; that is the only selling.