Privacy Policy
Last updated: October 2026
PureKit is built with a privacy-first approach. This policy explains how we handle your data — or more accurately, how we don't.
No Data Collection
PureKit tools run in your browser using client-side JavaScript. Your text, files, images and any other input are processed on your device and are never sent to any server. We do not collect, store or have access to the data you process with our tools. The one exception is the website check described below, which needs the website address you enter.
Website Checks
The PHP Version Checker and PHP2Shell Checker can check a website by its address. Browsers can't read another site's response headers, so when you use this feature, the address you enter is sent to a PureKit function running on Cloudflare. It requests that site's homepage (and, for WordPress sites, the public /wp-json/ address) and returns what the response headers show (such as X-Powered-By) and signs that the site runs PHP. We don't store the address or the result. Each check is counted in our Plausible analytics with only its outcome (version found, hidden, blocked or error), the PHP branch found (such as 8.3), the PHP2Shell verdict, whether the version came from the homepage or /wp-json/, and which tool was used. The address and anything else that identifies the checked site are never sent to analytics. Cloudflare's standard request logs apply, as described under Hosting & CDN.
Privacy-Friendly Analytics
PureKit uses two privacy-respecting analytics services: Cloudflare Web Analytics and a self-hosted instance of Plausible Analytics. Neither uses cookies or tracks individual users. Cloudflare Web Analytics provides basic aggregate statistics (page views, referrers) without collecting personally identifiable information, and is GDPR and CCPA compliant. Plausible does not store IP addresses or raw User-Agent strings: they are combined with a salt that is rotated and deleted every 24 hours to count unique visitors per day, and are used to work out the browser, operating system, device type and approximate location (country, region, city). It does not track people across devices, websites or apps. We only see aggregate statistics such as page views, referrers, countries and counts of website checks by outcome.
No Cookies or Personal Tracking
PureKit does not use cookies for tracking. We do not use Google Analytics, Facebook Pixel, or any similar invasive services. We don't use browser fingerprinting, device tracking, or any techniques to identify individual users.
No User Accounts
PureKit does not require registration or user accounts. There is no login, no profile, and no personal information to provide.
Hosting & CDN
PureKit is hosted on Cloudflare Pages: a static website plus the small function behind the website check. Cloudflare may collect standard server logs (IP address, user agent, timestamps) as part of their infrastructure. These logs are managed by Cloudflare under their own privacy policy and are not accessible to PureKit.
Third-Party Services
PureKit does not integrate with any third-party services that process your data. Tool functionality runs in your browser, except the website check, which runs on Cloudflare as described above. No external APIs are called with your data.
Open Source
PureKit's source code is publicly available. You can verify our privacy claims by inspecting the code yourself. There are no hidden network requests or data transmissions.
Changes to This Policy
If we make changes to this privacy policy, we will update this page. Given our architecture (client-side processing, with the website check as the only server-side step), significant privacy changes are unlikely.
Contact
If you have questions about this privacy policy, please contact us at [email protected].