Skip to content
VerscalaScan website

Privacy Policy

Last reviewed: 2026-08-06. This describes what actually happens on this site today, not a generic template.

Data controller

Full legal identity and contact details for the operator of this site are published in our Imprint. For any privacy enquiry, use the email address on our Contact page.

Browsing the catalog

  • No analytics or tracking scripts are loaded on any catalog page.
  • No cookies are set by any catalog page.
  • There are no user accounts or logins.
  • Nothing you do while browsing — pages viewed, filters used, searches typed — is recorded or transmitted. The client-side filters on listing pages run entirely in your browser against data already loaded with the page.

If you run an accessibility scan

The scan tool is a separate feature from the static catalog above, and does send data to our server:

  • The URL you submit, and the scan results (pages visited, accessibility findings, score) are stored in our database so the report can be shown to you. Scans are kept for up to 90 days, after which they're automatically deleted. The report page itself is private: it's reachable only via an unguessable link, and is excluded from search engine indexing.
  • No account or email is required to run a scan, and the scan form does not ask for one.
  • Your IP address is used briefly to limit how many scans can be started from one IP address or against one target site per hour (abuse prevention). This rate-limit record expires automatically after an hour and is not linked to your scan report in the database.
  • Bot verification (Cloudflare Turnstile): when active, the scan page loads a script from challenges.cloudflare.com and sends your IP address to Cloudflare to confirm you're not a bot before starting a scan. That check is subject to Cloudflare's own privacy policy, not ours, and may set its own cookie in your browser.
  • Plain-language explanations of findings, where shown, are generated per issue type (e.g. "missing image alt text"), not per scanned site — nothing about your specific site or URL is sent beyond what's needed to generate that generic explanation, and the result is cached and reused for anyone who hits the same issue type.

What is collected if you email us

If you email us, we receive whatever your email contains (address, name if you give one, message body) through our email provider, and use it only to answer you or act on your request. We do not use that information for marketing and do not share it with third parties.

Our hosting provider and any content-delivery network in front of this site will, like essentially every web server, log technical request data (IP address, user agent, timestamp) for operational and security purposes, under its own retention policy. We do not access, aggregate or analyse those logs for tracking purposes.

Links to other sites

Agency profiles and guides link out to agencies' own websites and to government sources (accessibility declarations, legislation). Those sites have their own privacy practices, which we don't control and this policy doesn't cover.

If this changes

If we later add analytics, a lead-routing form, scan report deletion controls, or any other feature that changes what personal data is collected, this page will be updated to describe it accurately before that feature goes live — not after.