Privacy Policy

Last updated: 2026-08-15

Who we are

WCAG Checker ("we", "us") provides an accessibility scanning platform for websites. This policy explains what data we collect, why, and the rights you have over it.

Data we collect

• Account data: email address, hashed password, display name.
• Usage data: scans you run, spaces/organizations you create, API requests.
• Technical data: IP address (hashed for security logs), user agent, device/session metadata for login security.
• Scan artifacts: screenshots of the pages you scan, stored so scan reports can display them.
• Authenticated-scan credentials: if you configure a login for a scan target, the credential is encrypted at rest and only decrypted at scan time to perform that login — it is never returned in API responses or scan results.

Cookies

We use strictly necessary cookies to keep you signed in (an httpOnly session cookie and an httpOnly refresh token cookie). We do not use third-party advertising or tracking cookies.

How we use your data

• To provide and operate the scanning service.
• To secure your account (session management, abuse prevention, rate limiting).
• To send transactional email (verification, password reset, scan notifications).

Data retention

Account data is retained while your account is active. Revoked login sessions are purged after 90 days. You can request deletion at any time (see below).

Your rights (GDPR)

If you are in the EEA/UK, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us using the details below to exercise these rights.

Contact

Questions about this policy: [email protected]