Last updated: October 22, 2026
PHP Vulnerability Checker (also described as a PHP version checker for PHP2Shell) is a Chrome extension developed by GetPickAds / Pick Ads. This Privacy Policy explains what information the extension collects, how it is used, and how it is protected.
PHP Vulnerability Checker helps you check whether a website publicly exposes a PHP version that may be affected by PHP2Shell, and shows upgrade guidance for common hosting setups.
When you run a check, the extension sends the domain (and optional manual version or hosting channel) to Pick Ads APIs. Our servers make one ordinary homepage request to that domain - the same kind of request a normal visitor would make - and compare any publicly visible PHP version signals to the advisory. The extension does not inject scripts into websites and does not send exploit or attack traffic.
Settings (auto-check, toolbar badge, analytics opt-out), welcome state, and optional signed-in session data are stored locally in chrome.storage on your device.
Account information
When you choose to sign in with Google for Fix Pack or Premium, we may receive and store information such as your email address or account identifier.
We use this information to:
You can run Free checks without creating a GetPickAds account. Sign-in unlocks the free site slot, Fix Pack, and Premium features.
PHP Vulnerability Checker does not intentionally collect or transmit:
When you start a check, the domain and optional inputs you provide are sent to Pick Ads APIs so we can perform the passive homepage check and return a verdict, recommended versions, and hosting guidance.
If you sign in and purchase Fix Pack or Premium, account and entitlement checks go to GetPickAds APIs, and payments are processed by Dodo Payments on its checkout pages under its own privacy policy.
Anonymous product analytics may be sent (for example install, plan, feature used, extension version) with a random install identifier. Never site URLs, PHP versions, evidence strings, or guide contents.
The extension uses Chrome permissions such as activeTab, storage, identity, and alarms so it can pre-fill the current tab’s domain when you open the popup, remember settings, sign you in if you choose to buy or restore a plan, and refresh Premium status.
Host access is limited to https://api.getpickads.com/* for checks, guides, auth, billing, and optional analytics. The extension does not request broad access to every website.
Google Sign-In may be used when you voluntarily authenticate for Fix Pack / Premium checkout or to restore an existing subscription.
Payment information is processed by Dodo Payments. PHP Vulnerability Checker does not intentionally collect or store users’ full payment card information.
Limited anonymous usage events may be processed by our analytics provider according to its privacy practices.
Target websites you ask us to check receive a normal homepage request from our servers, similar to any visitor.
We use reasonable technical and organizational measures to protect information processed by the extension and its associated services.
No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
Account information is retained for as long as necessary to provide account, Fix Pack, and Premium functionality or as required for legitimate business and legal purposes.
Local settings remain in your browser until you clear extension storage or uninstall.
You can sign out to stop using your GetPickAds account in the extension.
Free: check sites without signing in; sign in for one free site slot with recheck, full guides, and PDF for that site.
Fix Pack is a one-time unlock for one site. Premium is a monthly subscription for up to 10 sites and bulk check.
You may choose whether to sign in with Google or purchase a plan. You can cancel Premium at period end from Account in the extension.
You can turn off product analytics in Settings, or remove the extension / clear its storage in Chrome’s extension settings.
We may update this Privacy Policy when the extension’s functionality or data practices change. The updated version will be published on this page with a revised “Last updated” date.
Questions about this Privacy Policy or PHP Vulnerability Checker: support@getpickads.com.