Privacy Policy

FairSiteHQ ("FairSiteHQ," "we," "us") is an automated web accessibility scanner. This policy explains what we collect when you use fairsitehq.com and the FairSiteHQ app, why we collect it, who helps us process it, how long we keep it, and what you can do about it.

The short version:

• We collect your email address, the sites you add, and the results of the scans you run. We don't ask for your name, company or phone number.
• Payments are handled by Stripe. Your card details never reach us.
• We don't use analytics, advertising trackers or marketing cookies, and we don't sell personal information.
• Your scan results are visible only to your account. We don't combine them with other customers' data.
• You can download your data and delete your account from your account settings.

If you have an account

• Email address and password. Your password is stored only as a hash by our sign-in provider, so we can't read it. You can also sign in with a one-time email link.
• Sites you add. Each site's address, scan schedule, page limit, and whether it's active or paused.
• Ownership verification. The verification code we give you, the method you chose (meta tag, file or DNS record), and when we last checked for it.
• Login details for logged-in scanning, if you use it: the login page address, username, password and form field selectors you give us. The password is encrypted before it's stored and is never shown back to you in the app. Only our server uses it, at scan time.
• Scan results. See "Data from scanned sites" below.
• Names for PDF reports, if you add them (Studio plan): the agency or company name you enter on the Account page, and the client name you enter for each site. They're printed on the cover of your PDF reports as “Prepared by” and “Prepared for”. A client name can be a person's name, so only enter one you're allowed to use.
• Your logo for PDF reports, if you upload one (Studio plan). We don't keep the file you upload: we redraw it as a new PNG image, which removes any information stored inside the file (such as camera or location details), and keep only that copy.
• Scan log. A record of when each manual or scheduled scan was started.
• Billing records. Your Stripe customer and subscription IDs, plan, subscription status, renewal date and trial dates. You enter card details on Stripe's own pages, and they stay with Stripe.
• Trial records. To allow one free trial per person, per company and per website, we keep SHA-256 hashes of your email address, your company email domain, and the hostname of each site used in a trial. We store the hashes, not the original values. A hash can still be matched by someone who already knows the original email address, so we treat these records as personal information.

If you use the free homepage scan without an account

• The homepage address you scan.
• A keyed hash of your IP address, used only to apply the daily limit of 3 free scans. We don't store the IP address itself.
• The scan's status and a summary: issue counts by severity and the top 3 issue types. We don't store any of the page's code.

Free homepage scans are deleted after 24 hours.

If you join the waitlist

Your email address. We use it only to give you the longer 30-day free trial if you sign up with the same address. We don't send emails to the waitlist.

When you visit fairsitehq.com

We don't run analytics. Our hosting provider keeps standard request logs, which include your IP address, browser details and the page requested. Our sign-in provider logs the IP address and browser used for each sign-in. Our own server logs record site addresses and account IDs, never passwords. To apply rate limits, our server holds IP addresses briefly in memory; it doesn't store them.

When you contact us

The messages you send us and our replies.

When you scan a site, our scanner opens its pages in a headless Chrome browser and runs automated accessibility checks (the open-source axe-core engine plus our own screen-reader checks). For each page it visits, we store:

• the page's address, and whether it loaded;
• each failed check: its rule ID, severity, description, help text and WCAG references;
• for each element that failed: a short excerpt of its HTML code, its CSS selector, and an explanation of what failed;
• whether known accessibility overlay tools were detected on the page;
• totals by severity, and which sets of checks ran.

We don't store full page code, screenshots, images, the site's cookies, or anything typed into forms during a scan.

Personal information in code excerpts

Code excerpts are stored as they appeared on the page. If you use logged-in scanning, an excerpt can include personal information that was shown on that page, such as a name in a link or an email address in a form field. Reports shorten excerpts to 400 characters and hide the contents of form fields, but the stored copy is not redacted. Only your account and our server can read it. We recommend using a dedicated test account for logged-in scanning rather than a real customer's account.

Who can see scan results

Only the account that ran the scan. Our database enforces this for every row. We don't combine scan data across customers, and we don't use it to build datasets or train AI models. If that ever changes, we'll update this policy and ask for your consent first.

PDF reports

When you download a report as a PDF, our server makes the file from your stored scan results at that moment and sends it to you. We don't keep a copy. The PDF contains the same information as the online report (with shortened code excerpts and form contents hidden), plus the names described above if you added them. If you uploaded a logo, it's printed on the cover next to your agency name. Once you've downloaded it, the file is yours to keep or share, and what happens to it after that is up to you.

Ownership checks

To verify a site, we fetch its homepage, a fairsitehq-[code].txt file, or a DNS TXT record, and store only whether your code was found and when.

If someone else scanned your site

FairSiteHQ users can run one-off scans of public pages after confirming they own the site or have the owner's permission. Our scanner identifies itself as FairSiteHQ-Scanner and links to fairsitehq.com/scanner, which explains what it does. The results are stored only in the account that ran the scan. If you'd like us to stop scans of your site by accounts that haven't verified ownership, email privacy@fairsitehq.com from an address at your domain.

We use the information above to:

• create your account and sign you in;
• run the scans you request, on the schedule you set, and show your reports and history;
• make PDF copies of your reports when you ask, with the names and logo you've added;
• check site ownership, including a re-check at the start of each scheduled scan;
• send the service emails listed in section 7;
• run subscriptions and free trials through Stripe, apply the one-trial rule, and give people on the waitlist the 30-day trial;
• apply plan limits and rate limits, and prevent abuse;
• answer support requests;
• keep the service secure and fix problems.

We don't use analytics, we don't build advertising profiles, and we don't sell or rent personal information.

We use four service providers to run FairSiteHQ. Each receives only what it needs to do its job.

We may also share information:

• for legal reasons, if required by law, subpoena or other legal process, or to protect the rights, property or safety of FairSiteHQ, our users or others;
• in a business transfer, if FairSiteHQ is involved in a merger, acquisition or sale of assets, subject to this policy or a successor policy we tell you about;
• at your direction, when you ask us to.

Deleted data can remain in our database backups for up to [backup period] days before those backups expire.

Wherever you are, you can:

• Download your data from your account settings. The file includes your account details, your sites and settings (without stored passwords), the names and logo you added for PDF reports, and your full scan history.
• Delete your account from your account settings. You confirm by typing your account's email address. This cancels any subscription first (if it can't be cancelled, nothing is deleted) and then straight away deletes your sign-in, sites, scans, stored login details, names and logo for PDF reports, and scan log. We keep only your billing record and trial records, as described in section 6.
• Remove a site at any time. Its scans are deleted straight away.
• Ask us for a copy of your information, or to correct it, by emailing privacy@fairsitehq.com.

Emails we send

Every email is about your own account or sites. We don't send newsletters or marketing email.

These are service emails, so there's no unsubscribe link. Alerts for a site stop when you remove that site.

We use only the cookies needed to keep you signed in. We don't use analytics or advertising cookies.

• sb-[project]-auth-token (sometimes split into parts ending .0, .1): keeps you signed in. Set by our sign-in provider's code when you sign in. Visitors who aren't signed in don't get it.
• sb-[project]-auth-token-code-verifier: set for a few minutes while a sign-in link or password reset is in progress.

The app doesn't use localStorage or sessionStorage. Our fonts are served from fairsitehq.com, so loading a page doesn't contact any other company. Stripe's checkout and billing pages run on stripe.com and set Stripe's own cookies there.

• Data is encrypted in transit (HTTPS).
• Passwords are stored only as hashes by our sign-in provider.
• Login details for logged-in scanning are encrypted with AES-256-GCM before they're stored, and are never sent back to the browser.
• Our database checks every request so that one account can't read another account's sites or scans.
• Today, only FairSiteHQ's founder has access to the production database.

No system is completely secure, and we can't guarantee absolute security. If a breach affects your information, we'll notify you as required by law.

FairSiteHQ is a business tool for companies and professionals, not for children. We don't knowingly collect personal information from children under 13. If we learn that we have, we'll delete it.

FairSiteHQ is run from the United States. Our database and servers are in [region to be confirmed]. If you use FairSiteHQ from outside the U.S., your information will be transferred to and processed in the United States, whose data protection laws may differ from your country's.

We may update this policy as FairSiteHQ changes. When we do, we'll change the "last updated" date at the top. For significant changes, we'll also email active customers.

Questions about this policy, or requests about your information: privacy@fairsitehq.com.