Privacy Policy

The widget collects no personal data

When the accessibility widget loads on a website, it does not set cookies, does not use browser fingerprinting, does not read page content, and does not identify visitors in any way.

It sends one anonymous counter event per action — widget loaded, menu opened, tool used — containing only the site's licence identifier and the event name. There is no visitor identifier, no session, and no way to link two events to the same person.

• No cookies and no local storage used for tracking (accessibility preferences are stored locally on the visitor's own device, and never transmitted).
• Like any web request, these events carry the visitor's IP address. We don't store it with the counters; our hosting provider's standard request logs may keep it for a limited time (see below).
• Because no personal data is processed, the widget requires no consent banner.

What we store for account holders

If you create an account to manage a widget, we store the following:

• Your email address, and optionally a name and company you choose to enter, and the language you use the dashboard in. We use them to sign you in, to answer you, and for the account emails described below.
• The domains you add, and the widget configuration for each.
• Scan results for the sites you add: public page URLs, detected accessibility issues, short HTML snippets of the offending elements, and a screenshot of the homepage.
• AI fix plans you generate, and how many you have used in the current period.
• Anonymous usage counters per site, as described above.
• Your plan, its limits and expiry, and internal notes our team adds about it (for example, what was agreed for a paid plan).
• Conversations with us: the messages you send in the chat or from the contact form, and, if you write while signed out, the name and email address you enter.

Emails we send

We email you only about your account: a reply from our team to a message you sent, a scan that is ready, a limit of your plan that you reached, and a paid plan that is about to expire. We don't send newsletters or marketing, and we don't add your address to any mailing list. You can turn off each kind of these emails in your profile.

When you write to us, the message is also emailed to our team so it can be answered.

Cookies

Signing in keeps you logged in through your browser's storage; this is needed for the dashboard to work and requires no consent.

With your consent only, we use Google Analytics to see how this site is used; it sets its own cookies. Until you accept in the cookie banner, it is not loaded at all. You can change your choice at any time from "Cookie settings" at the bottom of the homepage; declining deletes its cookies.

The accessibility widget never uses cookies.

Processors we rely on

We use a small number of third parties, each for a single purpose:

• Google Cloud and Firebase — hosting, sign-in, database storage and storage of scan screenshots. Their standard request logs, which include IP addresses, are kept for a limited time.
• Google Gemini — when you press the button to generate an AI fix plan, the detected issues and HTML snippets for that scan are sent for analysis. Nothing is sent unless you ask for it.
• Resend — sends the emails described above, so it receives your email address and the content of those emails.
• Google Analytics — only if you accept analytics cookies, as described above.
• Google's website-icon service — the dashboard shows each of your websites with its icon, which your browser loads from Google, so Google sees the domains you manage.

Scans only touch public pages

A scan fetches pages the same way any visitor's browser would, over the public internet, using the URL you provide. It does not log in, does not submit forms, and refuses any address that is not publicly routable. Do not use it against sites you do not control.

Who can see your data

Our team can open your account as you see it, to help with support and to manage your plan. We do not sell data and do not share it for advertising, and we run no advertising trackers.

Retention and your rights

Deleting a website in the dashboard deletes its configuration, its scan history and screenshots, and its usage counters. You can delete your account from your profile: we email you a link to confirm. Once you confirm, the account is locked and its widgets are paused at once, and after 30 days we delete everything stored for it and the account itself. Until then, the link in our email cancels the deletion.

You can request access to, correction of, or deletion of your data, and you can object to processing, by contacting us. You also have the right to lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali).