Privacy Policy

Privacy Policy

1. Introduction

Welcome to accessibilitychecker.org. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information in compliance with:

General Data Protection Regulation (GDPR) (Articles 12 & 13)
California Consumer Privacy Act (CCPA) &
Other applicable US state privacy laws (Virginia VCDPA, Colorado CPA

2. Data Controller

Data Controller

Address

accessibilitychecker.org

4 Peddlers Row, Newark, Delaware, 19702

 

3. Data Processing Activities

Below is an overview of the personal data we collect, the purposes for processing, legal bases, retention periods, and recipients.

 

Processing Activity

Purpose

Category of Personal Data

Lawful Basis (GDPR, CCPA, CPRA)

Retention Period

Recipient of Data

HTTP Requests / Responses

To connect with the application, ensure security, monitor unauthorized access attempts

Logs (IP address, URLs, timestamps, user agent strings)

GDPR: Contract / legal obligation CCPA/CPRA: Business purpose (security)

1 year after last use

Network administrator

Navigating (Essential Cookies)

Necessary for website functionality

Cookies

GDPR: Contract CCPA/CPRA: Business purpose (essential service)

Defined in cookie banner

Not applicable

Navigating (Analytics, Advertising)

Analytics, marketing purposes

Cookies

GDPR: Consent CCPA/CPRA: User opt-in for data sharing

Defined in cookie banner

Commercial teams

Sign-up / Register

To create and manage accounts

Name, email, password

GDPR: Contract CCPA/CPRA: Business purpose (account management)

Active account + 1 year

Not applicable

Login

Authenticate users

Email, password

GDPR: Contract CCPA/CPRA: Business purpose (authentication)

Session period

Not applicable

Contact

To respond to inquiries

Name, email

GDPR: Consent CCPA/CPRA: Business purpose (customer support)

Until request is resolved

Commercial teams

Note: All data is collected directly from users, not from third parties.

 

4. Security Measures

We implement strong security controls to protect your personal data.

Security Measure

Description

SSL/TLS Encryption

Secure connections using TLS 1.3 & TLS 1.2 with an A+ SSL Labs rating

Certificate Trust Chain

Trusted Certificate Authority (CA) verification

HSTS Implementation

Ensures HTTPS connections to prevent downgrade attacks

Cloudflare DDoS Protection

Mitigates risks of cyber-attacks

Password Policy

Requires 10+ characters, special characters, uppercase, lowercase, and numbers

ISO 27001 Hosting Provider

Hetzner hosts our infrastructure, ensuring high security standards


5. Third-Party Data Recipients & Transfers

Your data may be processed by the following third-party service providers, all of which comply with GDPR or are certified under the Data Privacy Framework (DPF) where applicable.

Provider

Headquarters

Compliance Status

CookieFirst

Netherlands (EU)

GDPR Compliant

Hetzner

Germany (EU)

GDPR Compliant (ISO 27001)

Automattic (WordPress.com)

USA

DPF Certified

Google (YouTube)

USA

DPF Certified

Cloudflare

USA

DPF Certified (with EU presence

 

6. Your Rights Under GDPR, CCPA/CPRA & Other Privacy Laws

You have the following rights concerning your personal data:

Right to Access
Right to Rectification
Right to Erasure
Right to Restrict Processing
Right to Data Portability
Right to Object
Right to Withdraw Consent
Right to Know
Right to Correct
Right to Opt-Out of Sale or Sharing
Right to Limit Use of Sensitive Personal Information
Right to Non-Discrimination

Note: No automated decision-making or profiling is used on this website.

To exercise these rights, please contact us at [email protected].

7. Do Not Sell or Share My Personal Information

We do not sell or share personal data as defined under CCPA/CPRA. We only process data for
essential services, analytics, security, and user-initiated interactions.

How to Manage Data Preferences:

You can adjust cookie and tracking settings via our cookie banner displayed when you visit our website.

8. Right to Lodge a Complaint

GDPR Complaints: File a complaint with an EEA Data Protection Authority (DPA):
https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

CCPA/CPRA Complaints: California residents can contact the California Privacy Protection Agency (CPPA): https://cppa.ca.gov/

9. Mandatory Data and Consequences of Non-Provision

Data Required

Consequences of Not Providing It

IP Address & Logs

Access to our website will be restricted.

Account Information (Email, Password)

You will not be able to register or log in.

Contact Details (Name, Email)

We will be unable to respond to inquiries.

10. Cookies & Tracking Technologies

All details regarding cookies, including their purposes and retention periods, can be found in the cookie banner displayed on our website.

11. Children’s Privacy & Age Restrictions

Our website is not intended for use by minors under the age of 16.

GDPR Compliance: Minors under 16 years old may not use our website without verifiable parental consent (Article 8 GDPR).
CCPA/CPRA Compliance: We do not knowingly collect personal data from children under 13 years old.

If we discover that we have collected data from a minor without parental consent, we will delete it immediately.

12. Updates & Contact Information

We may update this Privacy Policy periodically. Significant changes will be communicated via email or a notice on our website.

Company: accessibilitychecker.org
Address: 4 Peddlers Row, Newark, Delaware, 19702
Email: [email protected]