Privacy and data handling

Using the website

The public website provides documentation, demo pages, articles, and a scanner-profile builder. These tools do not require a customer account. Hosting requests reach Vercel, which processes request and traffic information under its Privacy Notice ↗. The Terms of Service describe use of A11y Scan.

Demo pages may request images, media, or embedded resources from other hosts. Those requests are handled by the resource providers and your browser. Following an external reference link takes you to that provider's site.

Optional website analytics

Google Analytics is off until you select Accept analytics. Rejecting it does not restrict the extension, documentation or free tools. Use Analytics choices in the footer to change your choice. The choice is saved in this browser's local site storage; if storage is blocked, it applies for the current page session.

After acceptance, a separate website measurement frame reports visits to public reading pages using Google Analytics property G-VY34P9ZB4H. It receives only the public page path, without query strings or URL fragments, and a fixed site title. It does not read the parent page's forms or tool content. The frame is not loaded on Support, the profile builder, demo fixtures, previews or other application sections. No Analytics code is added to the extension.

Google receives network and browser information associated with those requests and may use first-party cookies with this site's a11yscan prefix to measure visits. Advertising storage, advertising user data, personalized advertising and Google signals are disabled in this integration. Provider-side retention and account settings are controlled in Google Analytics; this page does not promise anonymous collection or a particular retention period. See Google's Privacy Policy ↗ and how Google uses information from sites that use its services ↗.

Rejecting analytics removes the measurement frame and this integration's accessible analytics cookies, preventing subsequent measurement from the page. It cannot withdraw a request already sent or delete historical records held by Google. You can also clear the site's cookies and local data in your browser. Ask the team about an analytics privacy request using the contact details below.

Profiles saved in your browser

The scanner-profile builder keeps its draft and named profiles in this browser's local site storage. Saving a profile does not create an account or upload it to a profile-sharing service. You can delete named profiles in the builder or remove the site's stored data through your browser settings.

Copying or downloading JSON creates a file or clipboard entry that you control. Public profile export removes crawl authentication and mock response headers. Mock response bodies and other content can still contain private information; review a profile before sharing it.

Sending feedback or a feature request

When the Support form is configured, it asks for a request category, name, email address, message, and optional page URL. The browser sends those fields and a security-check token to this website. The server verifies the token with Cloudflare Turnstile, then submits the request to the separate YantraKit support application under A11y Scan. A confirmed submission shows a saved ticket reference; email delivery is tracked separately. Request fields are excluded from website analytics.

Cloudflare's widget processes browser signals for its security check. Cloudflare describes that processing in the Turnstile documentation ↗ and Turnstile Privacy Addendum ↗. Support owns the ticket record and requests transactional email through YantraKit Comms; A11y Scan does not send email directly. Ticket storage and email delivery are separate, and a saved ticket does not by itself confirm that an email was delivered. Comms uses Resend as its configured email provider under its Data Processing Addendum ↗. This website form has no attachment upload. Any later support-portal file submission is a separate explicit action. Avoid including passwords or confidential page content in a message.

Retention and deletion requests

Local profiles remain until you remove them or your browser clears the site's data. Support conversations are stored separately from local profiles. Their retention, backups and delivery-provider records depend on the support service's operational settings. A fixed feedback-retention period has not been published for this beta.

For a question or deletion request, use Support and identify the relevant message or ticket reference. That page shows the current availability and verified contact options. The GitHub tracker is private and available only to project members. Keep passwords, tokens and unnecessary personal information out of messages.

Published articles and the editorial service

The website server reads published article metadata and HTML from the separate editorial service. Reading an article does not send your scan results or saved profiles to that service. An article with uploaded images may make image requests to the editorial host. Editorial staff use authenticated CMS accounts; those accounts are separate from the free tools.

Scope and updates

This notice documents the current implementation. Production provider settings, the project's formal retention process, and the final legal policy remain subject to operator review. The page is kept out of search indexing during that review. Changes to the product's data paths will be reflected here.