PHP Simple Check — Privacy Policy

Effective date: 2026-10-21 · Applies to the Chrome extension and the userscripts.

Short version PHP Simple Check does not collect, store, sell or transmit any personal data. All detection runs on your device. The only network request it makes is a HEAD request to the page you already opened, to read that page's own response headers. There are no servers, no analytics and no third parties.

Chrome Web Store Limited Use Our use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not sell or transfer user data to third parties, we do not use or transfer it for purposes unrelated to the extension's single purpose, and we do not use or transfer it to determine creditworthiness or for lending purposes.

1. What the extension does

When you open a page, PHP Simple Check inspects signals that are already available to that page — response headers, cookies the page's own JavaScript can read, URLs, and markup — and shows a verdict: 🔴 PHP usage detected, 🟡 possibly PHP, or 🟢 no PHP signals. The verdict is displayed in the browser toolbar, optionally as a badge on the page, and in the extension's popup.

2. Data we collect

None. The extension has no server component. No browsing history, page content, URLs, cookies or identifiers are sent to the developer or to any third party. There is no analytics, telemetry, advertising or crash reporting.

3. Data stored on your device

• Settings (chrome.storage.local): whether the on-page badge is shown, sites you chose to hide it on, and — in the full sideloaded build only — the guard-mode host lists.
• Per-tab verdicts (chrome.storage.session): the latest result for each open tab, so the popup can show it. This includes the page URL, the detected signal labels and the URLs the page loaded. It stays on your device and is cleared when the tab is closed or the browser exits.
• Per-site preference (userscript only): a flag in that site's localStorage when you press "Hide on this site".

This data never leaves your device and is not readable by the developer.

4. Network activity

To read the response headers of the page you opened, the extension issues one HEAD request to that same URL from the page's own origin. This is the only request it makes. It goes directly to the site you are already visiting, exactly like the page loading itself; the developer never sees it. Sites that reject HEAD are judged from the remaining signals.

5. Cookies

• Store build (the version distributed through the Chrome Web Store): requests only the storage permission. It uses no cookie API; it only sees cookies that the page's own JavaScript can read.
• Full build (sideloaded from GitHub): additionally reads the names of cookies for the current tab (for example PHPSESSID) to detect PHP sessions. Only cookie names are inspected; values are never stored, logged or transmitted.

6. Permissions

The store build declares a single permission, storage, used for the settings listed above. Its content script runs on http(s) pages so that it can read the page's own markup and request its headers; this access is inherent to showing a page-level verdict and is not used to collect data.

7. Retention and deletion

• Settings are kept until you uninstall the extension or clear its storage.
• Per-tab verdicts disappear when the tab is closed (or when the browser exits).
• The userscript's "Hide on this site" flag lives in that site's localStorage; pressing Undo or clearing website data in your browser removes it.
• Because nothing is sent to the developer, there is no server-side copy to delete.

8. Third parties

None. The extension bundles all of its code and loads nothing at runtime — no remote scripts, no fonts, no images, no CDNs.

9. Children

The extension is a developer utility and is not directed at children under 13.

10. Changes

If this policy changes, the effective date above is updated and the change is published in the project repository: docs/privacy-policy.html.

11. Contact

Questions or requests: github.com/yomiplush/php-simple-check/issues.

日本語要約

本拡張機能は個人情報を収集・保存・販売・送信しません。判定はすべて端末内で完結します。通信は、 開いたページ自身への HEAD リクエスト 1 回（レスポンスヘッダーの取得）のみです。 設定は storage に、タブごとの判定結果はセッションストレージに保存され、ブラウザ終了時に消えます。 ストア版の権限は storage のみで、Cookie API は使用しません。 Chrome ウェブストアのユーザーデータポリシー（Limited Use）を遵守し、データの販売・第三者提供・ 目的外利用は行いません。