Privacy & data handling

Assessment data

Assessment answers stay in the current browser page’s memory and are cleared when you reload or leave. Printing or saving a result is an action you choose on your own device. There is no server-side URL probe or website scan.

Contact enquiries

When the contact form is enabled, the submitted name, email, optional domain, hosting details, PHP version, help type and message are processed to respond to your request. Do not include credentials, keys, personal customer data or confidential logs.

Enquiries are stored privately in a dedicated Supabase database. A successful status is shown only after the database confirms the write. No email notification is sent. Submissions are accessible to the site operator through authenticated Supabase administration, with no public submission list.

Providers and technical data

The hosting provider may process IP addresses and request metadata for delivery, security and operational logging. Supabase stores enquiry contents and a hashed rate-limit identifier in the project’s Ireland region. The application does not store raw visitor IP addresses in the enquiry tables. These providers have their own privacy terms and may process operational data in other locations.

Rate limits use hourly buckets; records older than two hours are removed when another submission is processed. Enquiries should be reviewed and deleted by the operator within 90 days unless an ongoing engagement or applicable obligation requires longer retention. The application does not log enquiry contents. Hosting and database operational logs have provider-controlled retention.

Analytics and storage

You can reject analytics or change your choice using Cookie settings in the footer. Your consent choice is stored locally for up to 180 days; analytics cookies are configured for 60 days. Rejecting after acceptance removes this site’s Analytics cookies and reloads the page to stop tracking. The Analytics property retains event-level data for two months unless the operator changes that setting. Search Console receives search-performance reports independently of these visitor analytics choices.

Google Analytics 4 is optional and runs on php2shell.support only after you choose Accept cookies. No Google Analytics script or collection request is sent before consent or after you reject it. It measures page views and a small set of tool and assistance interactions, without enquiry contents, assessment answers, reference domains or URL query strings. Advertising storage, advertising personalization and Google signals are disabled. Google may process technical device and network data under its own privacy terms.

Your privacy requests

Use the contact form and select Other to submit a privacy request. Depending on the applicable law, you may request access, correction or deletion and may have rights to object, restrict processing or complain to a supervisory authority. Further operator identity and address details are awaiting publication; no legal entity, certification or registration is asserted.