Privacy

Draft, version 0.1 of October 18, 2026. Pending legal review before the service opens.

What we collect

• Free homepage scans: the address you enter, the result of the scan, and a one-way keyed hash of your IP address used only to limit abuse (3 scans per hour). We do not store your IP address itself.
• Accounts: your email address, a salted one-way hash of your password (never the password itself), the sites you register, and billing status from our payment provider. We never see or store your card number.
• Cookie: one strictly necessary cookie keeps you signed in (30 days, or until you sign out). We use no advertising or analytics cookies.
• Audit data: for public pages of the sites you register, the page addresses and the accessibility issues found, including short HTML excerpts of the failing elements.

What we do not do

• We do not log in to your site, fill in forms or buy anything on it.
• We do not crawl pages your robots.txt asks automated agents to avoid.
• We do not sell personal data or use it for advertising.

How long we keep it

Free scan records are deleted after 30 days. Audit history is kept for 24 months, or until you delete your account, so that your dated record stays available.

Who processes it

Hosting and database: Render (Frankfurt, Germany). Payments: Stripe. Transactional email: to be named before the service opens. Each provider processes data only to run the service.

Your rights

You can ask for a copy of your data, its correction or its deletion. Contact details will be published here before the service opens.