php2shell-checker

Privacy policy

Last updated
On this page

This policy explains what personal data PHP2Shell Checker (“we”, “us”) collects when you use php2shell-checker.com, why, and what your rights are under the EU General Data Protection Regulation (GDPR).

Who is responsible for your data

The data controller is PHP2Shell Checker (php2shell-checker.com). Contact: [email protected].

Summary

  • The version checker on our home page runs in your browser. What you type is never sent to us.
  • The command-line checker and AI-agent commands run on your own machine. They don’t send us anything.
  • We use cookieless analytics that don’t identify you. Google Analytics runs only if you accept it, and can use a cookie.
  • If you subscribe to the newsletter, we store your name (optional) and email address to send it to you.
  • Google AdSense shows ads on this site and may use cookies — in the EEA, UK and Switzerland only with your consent.

Data we collect and why

When you visit the site

Our hosting provider records standard server logs: IP address, browser user agent, the page requested, the referring page and the time. We use them to run the site securely and to investigate abuse, on the basis of our legitimate interest in operating a secure website. Logs are kept for a short period (typically up to 30 days) unless needed to investigate an incident.

If we use a content-delivery network or security service (such as Cloudflare) in front of the site, it processes the same kind of technical data to deliver pages and block attacks.

Analytics

We use privacy-friendly, cookieless analytics (such as Cloudflare Web Analytics) to count page views. These tools don’t use cookies, don’t build profiles and don’t identify you. Our legal basis is legitimate interest.

Google Analytics 4 is separate. It stays off until you accept the notice on the site. If you accept, Google may set an analytics cookie and receive page views plus a few events: a newsletter signup, a quote request, a priority payment, and whether a version check came back patched, vulnerable, or unknown. We do not send your name, email address, or the PHP version you typed. You can reject the notice, and you can clear the choice by deleting this site’s data in your browser. Our legal basis for Google Analytics is your consent. Google’s description of how it uses data is at policies.google.com/privacy.

Newsletter

If you subscribe, we collect your email address, your first name (optional), the page you subscribed from and the time you gave consent. We use them only to send you PHP security alerts. Our legal basis is your consent, which you can withdraw at any time using the unsubscribe link in every email.

We use Resend (Resend, Inc., USA) to send our emails and store subscriber details, acting as our data processor. Resend may record basic delivery and engagement data — such as whether an email was delivered or opened — so we can see which alerts are useful. We confirm each subscription by email (double opt-in): you’re only added after you click the confirmation button. We keep your details until you unsubscribe; after that we may keep your email address on a suppression list so we don’t email you again.

Contact and patch-help enquiries

When you use our quote form, email us or book patch help, we process the information you send — name, email, company, country, details about your server and booking or payment information — to answer you and provide the service. Quote-form requests are delivered to our inbox by email through Resend. Our legal basis is taking steps towards or performing a contract with you. Bookings, invoicing and payments may be handled by third-party scheduling, invoicing and payment providers, who process data on their own terms. We keep records of paid work for as long as tax and accounting rules require.

Advertising and cookies

This site shows ads served by Google AdSense. Google and its partners may use cookies and similar technologies to show ads and measure them, including ads based on your previous visits to this and other websites.

  • In the EEA, the UK and Switzerland, we show a consent message from a Google-certified consent management platform. Personalised ads are shown only if you agree; otherwise Google may show non-personalised or limited ads. You can change your choice at any time through the consent settings.
  • You can learn how Google uses data from sites that show its ads at policies.google.com/technologies/partner-sites, and opt out of personalised advertising at adssettings.google.com.

Apart from Google Analytics (only after you accept) and ad and consent technologies, this site does not set its own tracking cookies.

International transfers

Some of our providers (for example Google and Resend) process data outside the EEA. Where they do, transfers are protected by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

Your rights

Under the GDPR you have the right to access your data, correct it, have it erased, restrict or object to its processing, and receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To use any of these rights, email [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority — in particular in the EU or EEA country where you live or work.

Children

This site is not directed at children under 16, and we don’t knowingly collect their personal data.

Changes to this policy

We’ll update this page if our practices change and revise the “last updated” date at the top. Significant changes will be highlighted on the site.