Privacy & Cookie Policy

Last updated: June 2026

This policy explains what data AccessGuard (“we”) collects, why, and the choices you have. It is provided for transparency and is not legal advice. Replace the placeholders in [brackets] with your company details before launch.

1. Who we are

AccessGuard is operated by [Your Company / Sole Trader name], [address], contact: [privacy@yourdomain].

2. What we collect

Account data: if you sign in, your email address and (for Google sign-in) your name and profile image, as provided by Google.
Scan data: the URLs you submit for accessibility scanning and the results returned. We do not store the content of scanned pages beyond the report.
Usage data: basic, optional analytics (pages visited, scans run) to improve the product — only if you accept analytics cookies.

3. How scanning works

Accessibility scans are performed using Google’s PageSpeed Insights / Lighthouse service. When you submit a URL, that URL is sent to Google to be analyzed. See Google’s privacy policy for how they process it. We do not sell scan data.

4. Cookies

We use two categories of cookies:

Essential — a single authentication cookie that keeps you signed in. The site cannot function without it, so it is always on when you log in.
Analytics (optional) — used only if you choose “Accept all” in the cookie banner. You can decline with “Essential only” and the site works normally.

Your choice is stored locally in your browser and you can clear it at any time via your browser settings.

5. Payments

Payments are processed by Stripe. We never see or store your full card details; Stripe handles them under its own privacy terms.

6. Data sharing

We share data only with the processors needed to run the service — Google (scanning), Stripe (payments), and our hosting/auth providers — and only as necessary to deliver AccessGuard. We do not sell personal data.

7. Your rights

Depending on your location (e.g. GDPR/CCPA), you may request access to, correction of, or deletion of your data. Contact [privacy@yourdomain] and we will respond within the legally required timeframe.

8. Retention

We keep account and report data for as long as your account is active, then delete or anonymize it within [90] days of account closure.

9. Changes

We may update this policy; material changes will be posted here with a new “last updated” date.

← Back to AccessGuard