Privacy Policy

1. Introduction

Accessibility Scanner EU ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, why we collect it, and how we handle it in compliance with the General Data Protection Regulation (GDPR).

2. Data We Collect

2.1 Scan Data

When you submit a URL for scanning, we process the publicly accessible content of that page. We store the scan results (URL, accessibility score, detected violations, and timestamp) to display your results. Scan data does not contain personal information unless personally identifiable information is present in the public HTML of the scanned page.

2.2 Wish List / Contact Form Data

If you join our wish list, we collect: name, work email address, company name (optional), and website URL (optional). This data is used solely to notify you when detailed reports become available.

2.3 Technical Data

We may collect standard server logs including IP address, browser type, and access timestamps for security and performance monitoring purposes.

3. Legal Basis for Processing

We process your data based on:

• Legitimate interest — to provide scan results and maintain service security
• Consent — when you voluntarily submit your contact information via the wish list form

4. Data Storage and Retention

Data is stored on servers within the European Union (via Supabase and Vercel). Scan results are retained for up to 12 months. Wish list contact data is retained until you request its deletion or until the purpose of collection is fulfilled.

5. Data Sharing

We do not sell your data. We may share data with the following service providers who process data on our behalf:

• Vercel — hosting and deployment
• Supabase — database storage
• Resend — transactional email delivery

All service providers are bound by data processing agreements and comply with GDPR requirements.

6. Your Rights Under GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Restriction — request restriction of processing
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at privacy@accessibilityscanner.eu.

7. Cookies

We do not use tracking cookies or third-party analytics. We may use essential cookies required for the Service to function (e.g., locale preference). These do not require consent under GDPR.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the date of the latest revision at the top of this page. Continued use of the Service constitutes acceptance of the updated policy.

9. Contact and Supervisory Authority

For privacy-related questions, contact us at privacy@accessibilityscanner.eu.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.