This Privacy Policy explains how Wenver Song, the operator of PHP2ShellChecker.io ("we", "us" or "our"), handles information when you visit this website, use its checker or contact us. For questions or privacy requests, email fanran10130@gmail.com or use the details on our contact page.
Effective date and last updated: 2026-10-22
1. Scope and service design
The service is a free, public website with no user accounts, payment processing or email requirement for checks. Its application code does not maintain a user profile, a public scan directory or a database of check history. This does not mean that no information is processed or that infrastructure generates no logs. Hosting, security checks and correspondence involve the processing described below.
2. Information processed when you browse
Cloudflare hosts and protects the website. Requests to the site can involve your IP address, request time, requested URL, browser or user-agent information, HTTP status, referrer information where your browser sends it, and security signals. This information is used to deliver pages, investigate errors, control abusive requests and maintain availability. Infrastructure and diagnostic logs may contain request metadata, including a submitted domain where it appears in a URL.
3. Information processed when you run a check
You provide a public domain name or a URL from which the service extracts a host. The browser submits the entered value to /api/check in a GET query string. That request URL can appear in browser developer tools, infrastructure logs and other request records; directly opening an API URL may also place it in browser history. Do not submit confidential URLs, private hostnames, credentials or a URL containing a token or another person's personal information.
The Worker requests the target's root page using HTTPS and may follow normal redirects. It examines public headers such as X-Powered-By, Server and Set-Cookie, including whether a PHP session-cookie marker is present. The returned result can include the domain, an advertised PHP version, selected response evidence, a final redirect URL, an HTTP status and elapsed time. The application does not deliberately store response bodies or publish results to a scan-history directory.
The target website and its network providers see the request from Cloudflare infrastructure, the checker's identifying user-agent and ordinary request metadata. The checker code does not forward your browser cookies, login information, email address, Turnstile token or visitor IP as request headers to the checked site. You should only check websites you own or are authorized to assess.
4. Cloudflare Turnstile
Pages containing a checker load Cloudflare Turnstile to help distinguish legitimate use from automated abuse. Cloudflare processes browser, device and network signals for this purpose. The browser sends the resulting token to our Worker in an X-Turnstile-Token header. Our Worker sends that token and, where available, your IP address to Cloudflare's Siteverify service. The token is not appended to the checker query string.
Cloudflare describes its processing and its roles in the Turnstile Privacy Notice and Cloudflare Privacy Policy. Some processing is performed on our behalf to protect this website; Cloudflare also describes processing for improving its own bot-detection capabilities. The About, Contact, Privacy and Terms pages do not load our checker or Turnstile script, although Cloudflare still handles their web requests.
5. Cookies, browser storage and analytics
The current application does not create its own account cookies, use local storage to build a check history, or include advertising pixels or third-party audience analytics scripts. Cloudflare security features may use cookies or other browser mechanisms depending on the feature and challenge configuration. For details, see Cloudflare's Cookie Policy. A PHP session-cookie marker reported by the checker comes from the target site's response; it is not an instruction to install that target's session cookie in your browser.
You can manage cookies and site data using your browser settings. Blocking Cloudflare resources or security storage may prevent the checker from working. This policy does not treat merely visiting the site as consent to unrelated marketing or non-essential tracking. If the service later adds such features, their notices and any required choices must be provided before they operate.
6. Messages you send us
If you email us, we receive your email address, the message, any name you provide and any attachments or other details you choose to send. We use them to respond, review corrections, handle privacy requests or investigate security and service issues. Email is processed by the mailbox provider, Gmail/Google, and relevant email-delivery providers. Their processing is also subject to their own policies, including Google's Privacy Policy. Please minimize sensitive information in messages.
7. Purposes and legal bases
We process information to provide the check you request, deliver the website, protect it from abuse, maintain and troubleshoot the service, respond to correspondence and meet legal obligations. Where EU or UK data-protection law applies, the legal bases are our legitimate interests in operating and securing this limited service and handling inquiries, and compliance with applicable legal obligations when required. We consider those interests alongside the rights and expectations of visitors. Where a particular optional activity requires consent, we will seek it separately rather than relying on this policy as blanket consent.
8. Recipients and disclosure
Information may be processed by Cloudflare for hosting and security, by our email providers for correspondence, and by the checked site's operator for the normal request it receives. We do not sell or rent personal information or submitted domains, and the current service does not share them for targeted advertising. We may disclose information when required by applicable law, to respond to a valid legal request, or where necessary and lawful to investigate abuse and protect the service or others. We do not automatically make your email or check results public.
9. Retention
The application holds check inputs and results to process and return the request; it has no dedicated persistent check-history storage. Copies can still exist in your browser, Cloudflare's service records or correspondence. Cloudflare's operational and security records are subject to the relevant product's retention settings and policies. For example, its Workers Logs documentation currently describes three-day retention on the Workers Free plan; this is not a promise that every Cloudflare security or service record is deleted after three days.
We retain correspondence and any specifically preserved incident information only for as long as reasonably needed to answer the inquiry, resolve the issue, protect against abuse, address a dispute or meet a legal obligation. The criteria include whether a matter remains open, whether records are needed to explain a correction or incident, and any applicable legal retention requirement. Information no longer needed for those purposes is deleted or anonymized where practicable. Email providers may retain backups under their own deletion cycles. Contact us if you need details about a particular record or interaction.
10. International processing and security
Cloudflare and email providers use global infrastructure, so information may be processed outside your country, including places with different privacy laws. Where applicable law requires safeguards for an international transfer, the relevant transfer mechanism must be used. Cloudflare describes its processing commitments and transfer safeguards in its Data Processing Addendum. You can contact us for information relevant to your request. We do not promise that information stays in a particular country.
The site uses HTTPS and restricts the checker through security controls. We ask users not to send credentials or unnecessary sensitive information and limit information use to the purposes described here. No website, network or email channel can guarantee absolute security.
11. Your rights and choices
Depending on applicable law and your circumstances, you may have rights to access, correct, delete or obtain a copy of personal information; restrict or object to processing; request portability; or withdraw consent where processing actually relies on consent. Withdrawal does not affect earlier lawful processing. You may also complain to the competent data-protection authority, including the authority where you live or work if relevant law provides that right.
Send a request to fanran10130@gmail.com, identifying the relevant interaction and an approximate date range. We may need proportionate verification before acting. Some rights are subject to legal exceptions, and we cannot retrieve a check history that the application does not keep. You do not need to create an account to make a request. We respond within the time required by applicable law and explain any applicable limitation.
12. Children, external links and policy changes
This service is intended for people responsible for administering websites and is not directed to children. We do not knowingly solicit children's personal information. If you believe a child has sent us personal information, contact us so that we can review and delete it where appropriate.
External websites linked from our guides have their own practices. This policy covers our service, not the independent practices of those sites. We update this page when our processing changes and revise the effective date above; material changes will be highlighted on this website as appropriate. For service conditions, read the Terms of Use; for the methodology and operator details, read About.