Who is responsible
SafeMPC Labs, contact: hello@php2shell.dev.
What happens when you read the site
The site is served by Cloudflare. Cloudflare processes your IP address and request details to deliver pages and protect the site from abuse. Every page also loads the Crisp chat script and the Google Analytics script described below. Apart from the chat, we set no cookies until you agree to something on this page.
The version check on the home page runs in your browser. What you paste is not sent anywhere.
Statistics (Google Analytics)
If you switch on "Statistics" in the cookie banner (or choose "Accept all"), we count visits with Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google tag loads with every page in Consent Mode. Before you agree it sets no cookies and sends Google only cookieless pings: that the page was opened, with your browser and approximate location, and no identifier that links one visit to the next.
After you agree, Google Analytics sets the cookies _ga and _ga_X16LFPZY3F, which last up to two years. It records the pages you open, the page you came from, your browser, device and screen size, and an approximate location worked out from your IP address. Google says Analytics 4 does not log or store IP addresses. Google signals and ad personalisation are switched off, and we only see totals. Google keeps the event data for two months, the shortest setting, and then deletes it.
Google may process the data in the US. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission has found adequate (Art. 45 GDPR).
Legal basis: your consent (Art. 6(1)(a) GDPR, and § 25(1) TDDDG for the cookies). You can withdraw it at any time with "Cookie settings" at the foot of every page. The cookies are then deleted and only cookieless pings are sent again.
Chat (Crisp)
The chat button in the corner of every page is provided by Crisp IM SAS, France. So that it opens at once, the Crisp script loads with each page; Crisp then receives your IP address and browser details and sets cookies that keep the chat session. When you write to us, Crisp stores the messages you send, your email address if you give one, and technical data such as your browser and approximate location, so we can reply. If you leave before we answer, Crisp may email our reply to you.
Legal basis: our legitimate interest in offering a quick way to reach us (Art. 6(1)(f) GDPR) and, when you ask about paid help, steps before a contract (Art. 6(1)(b) GDPR). You can ask us to delete a conversation at any time.
If you write to us, we keep the messages as long as needed to answer and, for clients, as long as accounting law requires.
Your rights
Under the GDPR you can ask for access, correction, deletion, restriction, portability and object to processing, and you can complain to a data protection authority. Write to hello@php2shell.dev.
Changes
We date every change at the top of this page.
Last reviewed on 22 October 2026.