Privacy Policy
Last updated: May 18, 2025
The privacy of your data—and it is your data, not ours!—is a big deal to us. In this policy, we lay out: what data we collect and why; how your data is handled; and your rights with respect to your data. We promise we never sell your data: never have, never will.
This policy applies to PHP Surf, a service provided by HydraForge. We refer collectively to HydraForge and our PHP Surf service as "PHP Surf" throughout this policy.
What we collect and why
Our guiding principle is to collect only what we need. Since PHP Surf primarily functions as a browser-based PHP execution environment, we collect very minimal data. Here's what that means in practice:
Website interactions and analytics
We use PostHog analytics to collect information about your browsing activity for analytics and statistical purposes such as conversion rate testing and experimenting with new product designs. This includes, for example, your browser and operating system versions, your IP address, which web pages you visited and how long they took to load, and which website referred you to us. The web analytics data are tied to your IP address.
Cookies
We use persistent first-party cookies to store certain preferences, make it easier for you to use our application, and support analytics.
A cookie is a piece of text stored by your browser. It may help remember login information and site preferences. It might also collect information such as your browser type, operating system, web pages visited, duration of visit, content viewed, and other click-stream data. You can adjust cookie retention settings and accept or block individual cookies in your browser settings, although our application may not function properly if you turn cookies off.
PHP code execution
When you use PHP Surf to execute PHP code, the execution happens entirely within your browser using PHP WASM. We do not store your PHP code on our servers and do not have access to the code you write or its execution results. Your code remains in your browser and is not transmitted to our servers for processing.
Voluntary correspondence
When you email PHP Surf with a question or to ask for help, we keep that correspondence, including your email address, so that we have a history of past correspondence to reference if you reach out in the future.
When we access or disclose your information
To provide our service. We use PostHog as a third-party subprocessor to help with analytics for our application.
To exclude you from analytics. If you request to be excluded from analytics, we will respect that choice and exclude your data.
Aggregated and de-identified data. We may aggregate and/or de-identify information collected through the services. We may use de-identified or aggregated data for any purpose, including marketing or analytics.
When required under applicable law. PHP Surf is a U.S. service and all data infrastructure is located in the U.S.
- Requests for user data. Our policy is to not respond to government requests for user data unless we are compelled by legal process or in limited circumstances in the event of an emergency request. However, if U.S. law enforcement authorities have the necessary warrant, criminal subpoena, or court order requiring us to disclose data, we must comply.
- Preservation requests. Similarly, our policy is to comply with requests to preserve data only if compelled by the U.S. Federal Stored Communications Act, 18 U.S.C. Section 2703(f), or by a properly served U.S. subpoena for civil matters.
Your rights with respect to your information
At PHP Surf, we strive to apply the same data rights to all users, regardless of their location. Some of these rights include:
- Right to Know. You have the right to know what personal information is collected, used, shared or sold.
- Right of Access. This includes your right to access the personal information we gather about you, and your right to obtain information about the sharing, storage, security and processing of that information.
- Right to Correction. You have the right to request correction of your personal information.
- Right to Erasure / "To Be Forgotten". This is your right to request, subject to certain limitations under applicable law, that your personal information be erased from our possession.
- Right to Complain. You have the right to make a complaint regarding our handling of your personal information with the appropriate supervisory authority.
- Right to Restrict Processing. This is your right to request restriction of how and why your personal information is used or processed.
- Right to Object. You have the right, in certain situations, to object to how or why your personal information is processed.
- Right to Portability. You have the right to receive the personal information we have about you and the right to transmit it to another party.
- Right to not Be Subject to Automated Decision-Making. You have the right to object to and prevent any decision that could have a legal or similarly significant effect on you from being made solely based on automated processes.
- Right to Non-Discrimination. We do not and will not charge you a different amount to use our products, offer you different discounts, or give you a lower level of customer service because you have exercised your data privacy rights.
If you have questions about exercising these rights or need assistance, please contact us at [email protected].
How we secure your data
All data is encrypted via SSL/TLS when transmitted from our servers to your browser. However, it's important to note that your PHP code execution happens entirely within your browser using PHP WASM technology, and your code is not stored on our servers.
Data retention
We keep analytics information for the time necessary for the purposes for which it is processed. For analytics data collected via PostHog, we follow industry standard retention practices.
Location of site and data
Our service and web properties are operated in the United States. If you are located in the European Union, UK, or elsewhere outside of the United States, please be aware that any information you provide to us will be transferred to and stored in the United States. By using our website or services and/or providing us with your personal information, you consent to this transfer.
Ezoic
Ezoic Services
This website uses the services of Ezoic Inc. (“Ezoic”), including to manage third-party interest-based advertising. Ezoic may employ a variety of technologies on this website, including tools to serve content, display advertisements and enable advertising to visitors of this website, which may utilize first and third-party cookies.
A cookie is a small text file sent to your device by a web server that enables the website to remember information about your browsing activity. First-party cookies are created by the site you are visiting, while third-party cookies are set by domains other than the one you're visiting. Ezoic and our partners may place third-party cookies, tags, beacons, pixels, and similar technologies to monitor interactions with advertisements and optimize ad targeting. Please note that disabling cookies may limit access to certain content and features on the website, and rejecting cookies does not eliminate advertisements but will result in non-personalized advertising. You can find more information about cookies and how to manage them here.
The following information may be collected, used, and stored in a cookie when serving personalized ads:
- IP address
- Operating system type and version
- Device type
- Language preferences
- Web browser type
- Email (in a hashed or encrypted form)
Ezoic and its partners may use this data in combination with information that has been independently collected to deliver targeted advertisements across various platforms and websites. Ezoic’s partners may also gather additional data, such as unique IDs, advertising IDs, geolocation data, usage data, device information, traffic data, referral sources, and interactions between users and websites or advertisements, to create audience segments for targeted advertising across different devices, browsers, and apps. You can find more information about interest-based advertising and how to manage them here.
You can view Ezoic’s privacy policy here, or for additional information about Ezoic’s advertising and other partners, you can view Ezoic’s advertising partners here.
Changes and questions
We may update this policy as needed to comply with relevant regulations and reflect any new practices. Whenever we make a significant change to our policies, we will refresh the date at the top of this page and take any other appropriate steps to notify users.
Have any questions, comments, or concerns about this privacy policy, your data, or your rights with respect to your information? Please get in touch by emailing us at [email protected] and we'll be happy to try to answer them!