What is sent

Privacy

Exactly what AJC Site Health sends to A&J Computers, what it stores on the site, and what it never does.

Version 1.1.1 · WordPress 6.0+ · PHP 8.1+ · Licensed GPL-2.0-or-later

What AJC Site Health sends, where, what it stores on the site, and what it never touches.

What leaves your server

One report every twelve hours, over https, to A&J Computers' collector at sitehealth.ajcomputers.com, an address built into the plugin. Nothing else, and nothing at all until a site key has been saved.

The report contains:

Part	Contents
This site	Its address and its A&J Computers site id; WordPress and PHP versions; whether it is multisite.
WordPress core	Installed version, the offered update, the core auto-update mode, and whether this PHP can run the update.
Plugins and themes	For each one installed: name, version, active or not, the offered update, auto-updates on or off, where updates come from, and what blocks the update.
Wordfence	If installed: its version, when the last scan finished and whether it succeeded, and its open findings: type, severity and Wordfence's one-line summary.
Problems	A short note if one part of the report could not be collected.

What is never sent

Posts, pages, media, comments or any other content.
Users, email addresses, passwords or roles.
Form entries, orders or customer data.
Files, or file contents.
Visitor information of any kind.

What is stored on the site

The site key: one WordPress option holding this site's A&J Computers site id and its secret. The secret is encrypted with the site's WordPress security keys and is never displayed or logged. (Sites set up with version 1.0.0 may have it in wp-config.php instead.)
Status: one WordPress option with the last attempt, its result, the address the site reports from, and whether reporting is paused.
A small log of at most a few dozen rows, for troubleshooting.
Update checks: the plugin reuses WordPress's own update-check caches and asks WordPress to refresh them when they are stale. It never clears or edits them.

Deleting the plugin removes the site key, the status option, the log and the scheduled event.

What A&J Computers can and cannot do with it

A&J Computers can read what the site reported. A&J Computers cannot log in to the site, run anything on it, or change it through this plugin: there is no command channel of any kind. The plugin only sends. It never receives instructions.

Suggested privacy policy wording

Nothing here concerns visitors, so most sites need no change. If you list the services your site talks to, you might add:

This site sends a twice-daily technical report to our maintenance provider, A&J Computers Computers, listing its software versions and pending updates. The report contains no personal data about visitors or users.

Questions about AJC Site Health?

Talk to the people who build and support it.