Privacy policy

Effective October 23, 2026. PHP Version Checker is operated by Mizhi Smart.

Website checks

When you submit a URL, our server requests that website. The target sees an ordinary request from our infrastructure, including our identifying user agent. We strip query parameters, fragments, and URL credentials are not accepted. Do not submit sensitive paths or private information. Free results are returned to your browser and are not saved as reports.

Bulk reports and recovery keys

We store bulk URLs, response-header evidence, results, timestamps, and batch status privately under your access account for 30 days. We then delete the stored reports. We store a cryptographic hash of your recovery key, rather than the key itself. An essential HttpOnly cookie maintains your access for up to one year; your browser also uses session storage for the recovery key while showing access details, payment drafts, and recently opened batch IDs. Anyone with your recovery key can access your credits and reports, so keep it private.

Payments and credit records

Stripe processes payment details and may collect your email and billing information. We do not receive full card details. We retain order identifiers, purchased credits, payment status, and credit grants to maintain your balance, resolve disputes, and meet applicable accounting requirements. Stripe’s handling of payment information is covered by Stripe’s privacy policy.

Security and hosting

Cloudflare hosts this service and stores operational data. We use short-lived, hashed IP-based rate-limit keys to prevent abuse; these records are removed after their time window and cleanup. We do not intentionally log submitted URLs or recovery keys in application error logs. Cloudflare may process network and security metadata as part of operating the service. Operational logs are retained according to our hosting provider’s configured retention.

Analytics

We use Umami to understand page visits and events such as completed checks, bulk submissions, checkout clicks, and purchases. Our event payloads do not include submitted URLs, recovery keys, email addresses, or report contents. The tracking script excludes query parameters, and respects the browser’s Do Not Track setting. We do not use advertising trackers or sell submitted website lists.

Your choices

You can disable analytics with your browser’s Do Not Track setting or a content blocker. Clearing essential access cookies removes this browser’s access; save your recovery key first. Use our contact page to request access, correction, or deletion of stored data. We may need an order identifier or a verified access session to locate records. Never send your recovery key in email.

International processing and changes

Our infrastructure providers may process data in multiple countries. We update this policy when the service changes and publish the effective date here.