Privacy

What we collect, and why.

PatchRig is run by Sabrina Loo in Australia. This page explains, in plain language, what happens to your information when you use patchrig.com. Last updated 3 November 2026.

The free scan

When you type a website address into the scan, our server makes one ordinary request to that address and reads only the response headers, to look for a PHP version. It does not read the page, probe for flaws or change anything. We record the website address, the PHP version found (if any), whether PHP looks likely, the time, and a one-way hash of your IP address. We do not store your IP address itself. Please only scan sites you own or are authorised to check.

When you send your details

The email box under a scan result and the details form collect:

• your email address, and the website you want checked;
• your name, phone number and a note, only if you choose to give them;
• the scan result shown to you, when you used the scan;
• your confirmation that you own the website or are authorised to ask for a check;
• the time, and a one-way hash of your IP address, to spot abuse.

We use this only to reply to you, quote or carry out the work you ask for, and keep a record of what we did. We keep it while we are in touch and for a reasonable time afterwards, and we delete it if you ask. We do not sell it.

Your report email and the link back

When you ask for the free report we scan the site you gave us once more, save the report with your details, and email it to you through an email delivery service. The email has a button back to your report. That link carries a private code, so when you click it we know it was you and can see what you do next on this site (viewing the report, clicking a button, scanning again). We also set a small cookie that holds your lead number, never your email, so your later visits join up. Analytics sees you only as that number. Every email has an unsubscribe link, and we stop as soon as you use it.

Region setting

The AU and CA switch in the header changes the currency and a few sources shown. We guess it from your browser’s language and time zone (we don’t look up your IP address for it) and remember your choice in your browser’s local storage under the name “patchrig-region”. It stays on your device.

Analytics

We use PostHog (hosted in the United States) to understand how the site is used: pages viewed, buttons clicked, whether a scan finished and in broad terms what it found (for example, “PHP version detected”), and errors. PostHog may also record anonymised sessions of how the site is used, with everything you type masked. PostHog sets a cookie or local-storage identifier in your browser and sees your IP address and device details to work out approximate location and browser. We do not send your email address or the website address you typed into analytics events.

Other services that see some of your data

• Cloudflare provides our DNS and sits in front of the site, so it handles your traffic, and its Turnstile captcha checks your browser to tell people from bots before a form is accepted.
• Email delivery. Report emails are sent through an email delivery provider, which sees your address and the email content.
• Cal.com runs our booking page. If you click “Book a call”, you leave this site and its own privacy policy applies.
• Our hosting. The site and its database run on a server we control. Details you send are stored in that database.

If we contact you first

We may email or phone businesses about the security of their website, using contact details that are published publicly, such as a website or a business listing. If you would rather not hear from us, reply “stop” or write to the address below and we will remove you and not contact you again.

Your choices

You can ask us to show you what we hold about you, correct it, or delete it. You can also block analytics cookies in your browser; the site and the scan still work. Email [email protected] and we will reply. If you are not happy with how we handle a request, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

If we change what we collect or who we share it with, we will update this page and its date. For anything not covered here, email [email protected].