Pasted data stays in this browser tab
The checker does not upload input, place it in the URL, save it to browser storage or send it to analytics. It produces PHP vulnerability guidance from bundled version data.
Analytics
The public site loads the supplied pageview.app script to measure visits. Checker input is not passed to that script. You can disable script loading and events for a visit by adding ?analytics=off to the page URL. Local development and noncanonical preview hosts do not load analytics.
Checker events contain only the result category, branch and platform. Guide-click events contain only an internal destination path. Pasted text and complete package revisions are not included. The local checker continues to work when analytics is disabled.