Privacy policy

Last updated: 15 October 2026

This policy explains what personal data A11yShip ("we") processes when you use the website, the dashboard and the a11yship command line tool, and what rights you have under the EU General Data Protection Regulation (GDPR).

Who is responsible

A11yShip is operated by an independent developer. For privacy questions or requests, use "Send feedback" in the dashboard. A dedicated privacy email address will be published here.

What we process

• Account data: your email address and a password hash, used to sign you in (contract, Art. 6(1)(b) GDPR).
• Project data: project names, accessibility statement fields you enter and manual checklist results.
• Scan reports: results uploaded by the CLI: rule findings, accessible labels of widgets, source file names and line numbers, build/branch/commit labels and screenshots rendered in your tests. We do not receive your source code.
• Feedback: messages you send from the dashboard.
• Technical logs: IP address, browser and request times kept by our hosting providers for security and operation (legitimate interest, Art. 6(1)(f)).

We do not use advertising, tracking cookies or analytics that profile you. The dashboard stores your sign-in session in your browser's local storage.

Where data is stored

• Supabase (database, authentication, file storage) – EU region, Ireland.
• Google Firebase Hosting – serves the website and dashboard files.

These providers act as processors under their data processing terms. Where data is transferred outside the EU, they rely on the EU Standard Contractual Clauses or an adequacy decision.

How long we keep data

Account and project data are kept while your account exists. You can delete scans and projects at any time in the dashboard; screenshots are deleted with them. To delete your account, send a request through "Send feedback" and we will erase it within 30 days.

Your rights

You can request access, correction, deletion, restriction, data portability and object to processing. You may also complain to your data protection authority.

Changes

We will update this page when processing changes and note the date above.