What we collect when you request a check
- Your website address and email address (required), and your name, business name, request type and note if you provide them.
- A record of the exact consent notice shown to you, its version, and when you agreed. Without the service consent, the form saves nothing at all.
- Basic technical data needed to run and protect the service, such as request time and a hashed, non-reversible form of your network address used only for rate limiting.
We never ask for passwords, hosting logins, API keys or customer data at the enquiry stage, and the form tells you not to send them.
Why we use it
- Service messages about your request: the receipt, the review finding, scope and payment steps, and the verification record. These rely on the consent you give in the form and are not marketing.
- Marketing email, only if you choose it: occasional PHP security updates and service offers. It is a separate, optional choice, it starts only after you confirm from the confirmation email (opening that email subscribes nothing), and every message carries a free unsubscribe that works without a password or a login.
- Operating the service: preventing abuse and duplicates, keeping consent records, and meeting legal record-keeping duties.
Who processes it
Your request is stored in the service database hosted by Cloudflare (website hosting and database). Email is delivered by Brevo (transactional sending) into mailboxes hosted by Google (the operator's support inbox). Payment, when a job proceeds, is handled by Stripe on its own hosted pages; this site never sees or stores card details. Data is processed in the regions those providers operate, which can include the United States and the European Union.
Retention and your rights
Enquiries are kept while they are being handled and afterwards as part of the service's job and consent records; consent evidence is retained so a subscription choice can be proven or a withdrawal honoured. You may ask at any time, at support@kollaztoolz.com, to see, correct or delete your information, or to withdraw consent. Withdrawing marketing consent stops marketing email immediately and never affects replies about a check you requested. Unsubscribing can never be undone by a duplicate form submission or a delayed system event; returning requires a fresh, explicit choice and a new confirmation.
The instant check on the homepage
The homepage also offers an instant check that needs no form and no email address. When you enter a website address there, our server requests that site's public pages and reads the PHP version the server announces in its response headers. Only the domain you enter is processed to produce the result, and neither that address nor the result is stored. To prevent abuse of the tool, we record a hashed, non-reversible form of your network address with the time, only to enforce a limit of 10 checks in any 10 minutes. That counter is not linked to the address you checked, and the instant check sets no cookies.
Cookies and tracking
This site sets no advertising or analytics cookies and runs no third-party trackers. No personal data is placed in page URLs.
Changes
If this notice changes, the new version is dated and published on this page, and consent records keep the version you actually agreed to.