Privacy statement

WCAG Toolkit is a free online tool that checks websites against WCAG 2.1 and 2.2 AA. The tool is published by Proper Access B.V. (Chamber of Commerce 95350985), Keizersgracht 520 H, 1017 EK Amsterdam, the Netherlands, and reachable at testtoegankelijkheid.nl. The older addresses wcag-scan.nl and wcag-scan.eu redirect to this domain. For questions about your data: info@properaccess.nl.

Scan

• The URL of the website you scan.
• The HTML scan results (findings, scores, screenshot metadata).
• Your IP address (only short-lived for rate-limiting; not retained).

Full report by email (optional)

• Name, job title and business email.
• Your answers to the EAA questions (B2C, revenue, FTE).

Quote request (optional)

• Organisation type (government / B2C / B2B / culture / etc.).
• Name, job title, business email; optional organisation, website, notes.

• Scan URL and results: to run the WCAG check and make the report available at a unique link.
• Lead / quote contact info: to email the report and to follow up with relevant advice or a quote.
• IP address: to limit abuse (automated requests) via rate-limiting.

Legal basis: legitimate interest (rate-limiting), consent (lead and quote data via explicit checkboxes), and performance of the requested service (the scan itself).

• Scan results and scanned URL: up to 7 days, then automatically deleted.
• Lead data (report email opt-in): as long as the conversation is relevant, up to 24 months.
• Quote request data: as long as the engagement is current, or up to 24 months for records.
• IP addresses for rate-limiting: 1 hour in memory.

We use a few processors, all EU-based or with an EU data residency option:

• Fly.io (Amsterdam, EU): app hosting and scan-result storage.
• AhaSend (Netherlands): sending report and quote confirmation emails.
• Plausible Analytics (EU): privacy-friendly visitor analytics without cookies, personal data or cross-site tracking.

We never sell data to third parties and we use no tracking cookies or ad networks.

We set one functional cookie (wcag_locale) to remember your language choice (NL/EN). This cookie is technically necessary for site functionality, contains no personal data and is not shared.

Under the GDPR you have the right to:

• access your data;
• correction or deletion;
• restriction or objection to processing;
• portability;
• file a complaint with the Dutch Data Protection Authority.

Send your request to info@properaccess.nl. We respond within 30 days.

All traffic uses HTTPS. Storage sits in an EU data centre in Amsterdam, with encrypted connections between the application and the processors. Raw data access is limited to the operator.

We may update this statement when legislation or our practices change. The current version is always on this page.