Skip to content
VerscalaScan website

Privacy Policy

Last reviewed: 2026-08-11. This describes what actually happens on this site today, not a generic template.

Data controller

Full legal identity and contact details for the operator of this site are published in our Imprint. For any privacy enquiry, use the email address on our Contact page.

Browsing the catalog

  • No analytics or tracking scripts are loaded on any catalog page.
  • No cookies are set by any catalog page.
  • There are no user accounts or logins.
  • Nothing you do while browsing — pages viewed, filters used, searches typed — is recorded or transmitted. The client-side filters on listing pages run entirely in your browser against data already loaded with the page.

If you run an accessibility scan

The scan tool is a separate feature from the static catalog above, and does send data to our server:

  • The URL you submit, and the scan results (pages visited, accessibility findings, score) are stored in our database so the report can be shown to you. Scans are kept for up to 90 days, after which they're automatically deleted. The report page itself is private: it's reachable only via an unguessable link, and is excluded from search engine indexing.
  • No account or email is required to run a scan, and the scan form does not ask for one.
  • Your IP address is used briefly to limit how many scans can be started from one IP address or against one target site per hour (abuse prevention). This rate-limit record expires automatically after an hour and is not linked to your scan report in the database.
  • Bot verification (Cloudflare Turnstile): when active, the scan page loads a script from challenges.cloudflare.com and sends your IP address to Cloudflare to confirm you're not a bot before starting a scan. That check is subject to Cloudflare's own privacy policy, not ours, and may set its own cookie in your browser.
  • Plain-language explanations of findings, where shown, are generated per issue type (e.g. "missing image alt text"), not per scanned site — nothing about your specific site or URL is sent beyond what's needed to generate that generic explanation, and the result is cached and reused for anyone who hits the same issue type.

If you subscribe to accessibility monitoring

Monitoring is an optional, free subscription that is separate from both the static catalog and the one-off scan tool. If you sign up, we store two pieces of information in our database:

  • Your email address and the URL of the site you want monitored. We use them for one purpose: to re-scan that site on a schedule and email you a digest when its accessibility findings change. Signing up does not create an account — there is no password and no login, just this email-and-URL pair.
  • How often we email you: re-scans run weekly, and we only send a digest when something actually changed since the previous scan (new or resolved findings, or a score change). A week with no changes produces no email — we don't send empty updates.
  • Confirmation before we use your address (double opt-in): right after you sign up we send a single confirmation email asking you to click a link. Until you click it, the subscription stays inactive: no re-scans and no digests are sent, and the address is never emailed again. If you didn't sign up, ignoring that email is enough — nothing further happens.
  • How to stop it (unsubscribe): every digest email contains an unsubscribe link. Opening it stops the subscription immediately — no further re-scans and no further emails. For transparency: unsubscribing marks the subscription as cancelled rather than erasing the row on the spot; we retain the email-and-URL record so the cancellation is honoured and the same address isn't quietly re-subscribed. If you want your monitoring record deleted entirely, ask us via the Contact page and we'll remove it.
  • Who sends the emails: confirmation and digest emails are delivered through Resend, our email provider, from [email protected]. Resend processes your email address only to deliver those messages on our behalf. Note that monitoring subscription records are not covered by the 90-day scan retention above: they are kept until you unsubscribe or ask us to delete them.

What is collected if you email us

If you email us, we receive whatever your email contains (address, name if you give one, message body) through our email provider, and use it only to answer you or act on your request. We do not use that information for marketing and do not share it with third parties.

Our hosting provider and any content-delivery network in front of this site will, like essentially every web server, log technical request data (IP address, user agent, timestamp) for operational and security purposes, under its own retention policy. We do not access, aggregate or analyse those logs for tracking purposes.

Links to other sites

Agency profiles and guides link out to agencies' own websites and to government sources (accessibility declarations, legislation). Those sites have their own privacy practices, which we don't control and this policy doesn't cover.

If this changes

If we later add analytics, paid monitoring plans, scan report deletion controls, or any other feature that changes what personal data is collected, this page will be updated to describe it accurately before that feature goes live — not after.