Last updated: 12 February 2026
Important: Only the data that a webshop actively returns to the fixed HOOK_URL (https://test.ociforms.com/action_page.php) is ever received by our server. Any test inputs you type into your browser (for example the webshop URL or test parameters you enter in the Test Tool UI) are sent directly from your browser to the target webshop URL you specify and do not get routed through or stored on our servers. When the webshop responds to the HOOK_URL, those returned POST/GET parameters are received by the PHP endpoint and immediately relayed to your browser for display; we do not persistently store those returned parameters.
This statement explains how test.ociforms.com (the Test Tool), developed and operated by Vladimir Hilderink, processes data during testing of OCI‑compliant webshops. This declaration is separate and independent from the privacy policy and terms of use of your.ociforms.com. Processing performed by the Test Tool is not governed by, nor does it extend the obligations of, your.ociforms.com.
When you run a test, you typically enter a webshop URL and optional parameters in your browser. One fixed parameter is HOOK_URL, which points to the PHP endpoint https://test.ociforms.com/action_page.php. The webshop under test may send data back to this HOOK_URL via POST or GET in accordance with the OCI 4.0 specification. Returned data may include order details, product information, customer fields, or any other parameters the webshop chooses to transmit.
Purpose: Data received at the HOOK_URL is processed solely to provide developers and testers with immediate visibility into which parameters and values a webshop returns during an OCI test. The Test Tool exists for functional testing and troubleshooting.
Legal basis: Processing is based on the following grounds:
No persistent storage: The Test Tool does not store received POST or GET parameters in a database or persistent log. Parameters received by the HOOK_URL are processed and immediately presented to the initiating user in the browser as the test result.
Immediate presentation: The PHP endpoint receives the parameters on the server and relays them to the frontend so the initiating user can see exactly what the webshop returned. This presentation is transient and not retained.
Sharing with third parties: We do not share received test parameters with third parties, except where technically necessary for the webshop’s own operations (for example, when the webshop loads external resources). External webshops may themselves process personal data; for such processing, consult the webshop’s privacy policy.
The Test Tool is intentionally designed to avoid persistent retention of test data. Temporary server variables required to process POST/GET requests are kept only for the duration necessary to render the test result and are then discarded. No permanent logs are kept of the content of received parameters. Standard system logs that record technical errors, access timestamps, or server events may be retained briefly for operational and security purposes but do not contain the substantive test payload.
Transport security: The Test Tool is accessible via HTTPS and all communication with the HOOK_URL is protected by TLS. Access control: Only the user who initiated a test sees the test result in their browser session. Administrative access to the server environment is restricted to authorized personnel and protected according to common best practices.
The Test Tool receives data from external webshops. The Test Tool is not responsible for how those external parties collect or process personal data. If an external webshop returns personal data to the HOOK_URL, that webshop remains responsible for complying with applicable data protection laws, including the GDPR. Always consult the privacy policy of the webshop under test for details about their processing activities.
If you believe personal data concerning you has been processed via the Test Tool, you may exercise the following rights where applicable:
To exercise any of these rights, contact the data controller using the details below. You also have the right to lodge a complaint with the competent supervisory authority.
Data controller
Name Vladimir Hilderink
Website https://www.vladimir-hilderink.nl
Email Vladimir@OCIForms.com
This statement applies only to test.ociforms.com. The privacy policy, terms of use, and data processing practices of your.ociforms.com are separate and managed by a different entity. Use of the Test Tool does not transfer your data to your.ociforms.com nor does it imply that your data is processed under their policies. Consult the privacy documentation of your.ociforms.com for information about their processing.
The Test Tool is provided as a technical aid for developers and testers. If you have questions about specific test cases or suspect that personal data has been processed incorrectly, contact privacy@test.ociforms.com. We will respond to requests and notifications in accordance with applicable law within a reasonable timeframe.
This statement was prepared by Vladimir Hilderink for test.ociforms.com. It is intended to be clear and legally robust but does not constitute a binding legal agreement. For legal certainty, consider having this text reviewed by a qualified privacy lawyer.