Privacy policy

This translation is provided for information only. The German version is legally binding.

1. Controller

Denkcode, owner Majeb Malik
Torbreite 16, 37688 Beverungen, Germany
Email: anfrage@php-checker.de · Phone: 05273 3739791

2. Overview

PHP Checker does not use tracking cookies, analytics or advertising services, or third-party content. The logo, font (Titillium Web), styles and scripts are delivered from our own server. Complete check reports are neither stored nor published; what we log briefly is described in section 5.

3. Hosting and provision of the website

The website runs on a virtual server operated by 1blu GmbH, Riedemannweg 60, 13627 Berlin. When a page is requested, the server necessarily processes your IP address for technical reasons in order to establish the connection and deliver the content.

• Connection log of the upstream TLS load balancer (haproxy): time, IP address and port, responsible internal service, amount of data transferred. Retention period: 7 days, then automatic deletion.
• Web server access log: time, requested path (without parameters), HTTP status, amount of data and processing time – without IP address. Retention period: 14 days.
• Web server error log: technical error messages without IP address. Retention period: 14 days.

The purpose is secure and stable operation, error analysis and the prevention of abuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a functional and secure website.

4. External check “Check website”

When you start a check, your browser sends the address you entered to our server (POST /api/check). The following then happens there:

• DNS lookup: The domain name is resolved via the DNS servers of our hosting provider (1blu GmbH). These servers learn the domain name, but not your IP address.
• Fetching the target website: Our server fetches the address once (HEAD, and if needed an aborted GET, at most three redirects). The target website receives our server’s IP address (195.90.214.181), the identifier PHP-Checker/1.0 (+https://php-checker.de/pruefumfang) and the usual request data. Your IP address, cookies or other browser data are not passed on.
• Result: Selected response headers, the HTTP status and redirects are returned to your browser and evaluated there. No public report URLs are created.

The legal basis is Art. 6(1)(b) GDPR (provision of the check you requested) and Art. 6(1)(f) GDPR. Please only enter addresses that do not contain any personal data; addresses with parameters or credentials are rejected anyway.

Confirmed check using a verification file

For the confirmed check, our server generates a signed one-time code and a small PHP file for your website; nothing is stored in the process. After you upload it, our server fetches exactly this file once (with the verification code in the request header). The file only reports the PHP version and the type of PHP runtime; it only responds to requests carrying the verification code, and not at all after 60 minutes. Please delete it after the check. The legal basis is Art. 6(1)(b) GDPR.

5. Abuse protection and operational metrics

To prevent the service from being misused for attacks or as a proxy, quotas apply. For this purpose we store:

• a pseudonymised key of your IP address (HMAC calculated with a secret key; the IP address itself is not stored) with counter values – deleted after 24 hours at the latest,
• a hash value of the checked domain name with a counter value – deleted after 10 minutes,
• daily totals (number of checks per result type, total duration) without IP addresses and without domain names – deleted after 30 days,
• an activity log for each check: time, type of check, checked address (without parameters), short result, duration, a truncated IP address (for IPv4 without the last block, for IPv6 truncated to the first three blocks) as well as device type and browser family (not the full user agent) – deleted automatically after 30 days. Only the operator has access, via a password-protected area; the list is not published.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting the service, the checked websites and our infrastructure, and in detecting errors and abuse.

6. Manual assessment “Assess version”

The version or package string you enter is evaluated exclusively in your browser. It is not transmitted to our server, to analytics services or to AI services.

7. Copying, downloading and printing the report

These functions work locally in your browser. Nothing is uploaded or published.

8. Storage in the browser

PHP Checker does not set tracking cookies. Your choice in the privacy notice is saved in your browser’s local storage (key phpchecker_consent_v1: your choice and the time), so that the notice doesn’t appear on every visit. If you explicitly select a language, we remember it in a cookie (pc_lang, only the language code, lifetime 1 year), so that you land directly in your language on your next visit. Both are technically necessary for the function you requested (§ 25(2) no. 2 TDDDG). We currently do not use any statistics or analytics services – even if you allow “Statistics”, nothing additional is collected. The check report and the verification file details only remain in the working memory of the open page.

9. Contact by email or phone

If you contact us, we process your details (e.g. name, email address, phone number, content of your enquiry) in order to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR. We delete the data once the enquiry has been dealt with and no statutory retention obligations apply.

10. Recipients and third countries

The recipient in the course of operation is our hosting provider 1blu GmbH. During the external check, the target website you specified receives the request data from our server described above. We do not transfer data to third countries; we have no influence on the hosting location and behaviour of the target website you choose.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). To exercise these rights, please use the contact details given above. You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).

Due to pseudonymisation, we are generally unable to attribute stored counter values to a person; they are automatically deleted after a short time anyway.

12. Last updated

This privacy policy was last updated in October 2026.