Privacy Policy — WCAGsafe

The short version

We scan websites for accessibility issues. To do that, we need some basic information from you. We do not sell your data. We use Google Analytics and Google Ads to understand how visitors find and use WCAGsafe and to measure our advertising — you can opt out (see “Cookies” below). We keep things simple and honest.

1. Who we are

WCAGsafe is an accessibility scanning tool that checks websites for WCAG 2.1 compliance issues. We help business owners understand their legal risk under the Americans with Disabilities Act (ADA) and similar laws worldwide. Our service is operated from wcagsafe.com.

2. What information we collect

Website URLs — the URLs you submit for scanning. We need these to run the scan.
Email address — optional. If you provide it, we use it to send your report and occasional product updates.
Account information — if you sign up, we store your name and email to manage your account.
Scan results — the accessibility violations found on your submitted URLs, stored so you can review them later.
IP address — collected automatically to enforce free scan limits and prevent abuse.
Payment information — handled entirely by our payment processors. We never see or store your card details.

3. How we use your information

To run accessibility scans on URLs you submit
To generate and deliver your compliance report
To manage your account and subscription
To send scan results and service updates (you can unsubscribe anytime)
To prevent abuse of the free scan feature
To improve our scanning accuracy and product features

4. Who we share data with

We work with a small number of trusted services to run WCAGsafe:

Database provider — stores your scan results securely
Authentication provider — handles account creation and login
Payment processors — process payments as Merchant of Record (we never see your card details)
AI provider — generates plain-English explanations of scan results
Cloud hosting providers — run our application infrastructure
Analytics & advertising — Google Analytics and Google Ads help us measure site usage and the performance of our ads (see “Cookies” below)

We do not sell or rent your personal data. The services above process data only to provide their function to us.

5. Cookies

We use a few categories of cookies:

Essential — keep you logged in (set by our authentication provider).
Functional — one cookie (ws_plan) remembers your subscription plan so the correct features load immediately on the homepage. It contains no personal data and can be removed at any time by blocking or deleting cookies in your browser.
Analytics & advertising — cookies set by Google Analytics (GA4) and Google Ads help us understand how visitors use the site and measure the performance of our advertising.

You can opt out of Google’s analytics and advertising cookies using the Google Analytics Opt-out Browser Add-on and your Google Ads Settings, or by blocking cookies in your browser.

6. How long we keep your data

Free scan results — kept for 30 days, then automatically deleted
Account and paid scan data — kept for as long as your account is active
Email addresses — kept until you unsubscribe or request deletion

7. Your rights

You have the right to:

Access the personal data we hold about you
Ask us to correct inaccurate data
Ask us to delete your data ("right to be forgotten")
Unsubscribe from emails at any time
Export your scan data

To exercise any of these rights, email us at support@wcagsafe.com. We will respond within 7 business days.

8. Security

We take security seriously. All data is transmitted over HTTPS. Passwords are never stored — authentication is handled by a dedicated identity provider. Your data is stored in an encrypted database at rest. We regularly review our security practices.

9. Children

WCAGsafe is not intended for use by anyone under the age of 16. We do not knowingly collect data from children.

10. Changes to this policy

If we make significant changes to this policy, we will notify you by email or by showing a notice on our website. Small clarifications may be updated without notice. The date at the top of this page always reflects the latest update.

11. The WCAGsafe browser extension

The WCAGsafe Chrome extension performs its accessibility scans entirely on your own device. When you audit a page, the extension runs the axe-core engine and its inspection tools against the content of the tab you are viewing, inside your browser. The pages you scan, their content, and their URLs are never sent to WCAGsafe or any third party — nothing about the pages you check leaves your browser.

The extension requests host access (permission to run on the sites you visit) for one reason only: to inject the accessibility checks into the page you choose to audit. It does not read, collect, store, or transmit your browsing history, form data, credentials, or personal information, and it does not track which sites you scan. It uses no analytics and sets no cookies. Because everything runs locally, it is safe to use on internal, staging, and logged-in pages.

The extension is free and does not require an account. If you follow a link from the extension to wcagsafe.com — for example to run a whole-site scan, monitor a site, or generate a certificate — any data you submit there is handled under the rest of this policy.

12. Contact us

Questions about this policy? We are happy to help. Email us at support@wcagsafe.com and we will get back to you promptly.