Privacy policy
- For a free scan you send us 1 web address and a few options; we ask for no name, no email and no account.
- Through the ChatGPT plugin, ChatGPT sends us 1 web address per scan.
- If you buy the Report or Fixed, Stripe takes the payment. We receive your email address, the website address you enter and whether the payment succeeded, never your card number.
- The server keeps a scan in memory only and deletes it 1 hour after you start it, or 24 hours after for a paid Report, or sooner.
- You can delete a scan at any time with the "Delete this scan" button in the report.
- The application writes no request logs and records no IP addresses.
- This site sets no cookies and loads no analytics or advertising.
- We do not sell or share data.
Who runs this site
Guido Cattabianchi runs this accessibility scanner. Mailing address: 620 Glenmore Blvd, Glendale, CA 91206. Email: hello@a11yrepair.com.
This policy covers the scanner and its reports. It does not cover the websites you scan; each of those has its own policy.
This version takes effect on October 2, 2026.
What you send us
To run a scan, you send 1 web address and 3 options. The site has no accounts, no sign-in and no passwords.
- The web address to scan.
- Whether to also scan at a phone width.
- Whether to run interaction tests.
- Whether you are authorized to test the site. You must check this box to run interaction tests.
What we receive when you pay
Stripe (stripe.com) processes payments for the Report and Fixed on its own checkout page, under its own privacy policy. We never see or store your card number.
From Stripe we receive your email address, your name if you enter it, the website address you type at checkout, the product, the amount and whether the payment succeeded.
We use these details to deliver what you bought, to answer you and to keep the records tax and accounting law require. We send no marketing email.
When you email us
Email to hello@a11yrepair.com passes through Cloudflare (cloudflare.com), which forwards it to our Google Gmail inbox. We keep messages as long as we need them to answer you and keep records. Cloudflare's and Google's privacy policies cover their part.
Access you give us for Fixed
For Fixed, you give us access to your site's code or theme. We use it only for that work, keep it confidential and delete any access details we hold when we deliver.
Scans started from ChatGPT
When you ask ChatGPT to scan a page with the Accessibility Repair plugin, ChatGPT sends us the web address to scan. The plugin scans at desktop width, and also at phone width when asked, and never runs interaction tests.
ChatGPT may attach request details, such as a language setting, to each call. The application does not store them.
We receive no name, email address or account details from ChatGPT. OpenAI's privacy policy covers your ChatGPT conversations; we do not see them.
A plugin scan is kept and deleted the same way as a scan started on this site. It has no delete button, so it expires 1 hour after it was created or at a server restart.
What we keep during a scan
The server holds a free scan in its memory, the working storage of the running program, and never writes it to disk or to a database. A paid Report is also written to a disk attached to our server, so it survives a restart, and is deleted from it with the rest of the Report.
Anyone who has the report link can open the report while the scan exists. The link contains a random identifier that is hard to guess, so share it only with people you want to see the report.
- The web address and the options you chose.
- A progress log with timestamps.
- The findings.
- Screenshots of the scanned page at 1440px and 390px wide, plus a forced-colors screenshot (the page as it looks when your operating system replaces its colors with a high-contrast set).
How long we keep a scan
The server deletes a scan at the first of these 3 moments:
- 1 hour after the scan was created, or 24 hours after for a paid Report.
- When the server restarts, for a free scan.
- When you click "Delete this scan" in the report. This deletes it at once.
What we do not record
The application writes no request logs. It does not record your IP address, your browser details or any identifier tied to you.
Our hosting provider, Railway (railway.com), may keep its own network logs under its own privacy policy. We do not control those logs.
Your display settings (text size, spacing and the like) stay in your browser and never reach the server. The cookie policy explains how.
What the scanned site sees
The scanner loads the address you enter in an automated Chromium browser. The scanned site's servers see a visit from our scanner, not from you.
The scanned site may set its own cookies inside that automated browser session. We discard the session after the scan.
To reach the page, the scanner clicks "yes" or "enter" on age gates and accepts or closes cookie banners. Interaction tests open menus and dialogs, type into search, and add 1 product to the site's cart, then remove it. The scanner does not place orders.
Sale, sharing and marketing
We do not sell or share scan data. We send no marketing email. We make no automated decisions about people.
The service is not directed at children, and we do not knowingly collect data from children.
How to delete a scan or ask a question
Click "Delete this scan" in the report to delete it at once. Everything else expires within 1 hour, or 24 hours for a paid Report. We hold no account data. To ask about the payment records we hold, email hello@a11yrepair.com.
For questions about this policy, email hello@a11yrepair.com.
Changes to this policy
When we change this policy, we post the new version on this page with a new effective date.