Access Audit Privacy Policy
Developer: VNCNT Labs · Effective date: October 17, 2026 · Version covered: 1.0 (free) · Contact: hello@vncntlabs.com
This policy covers the browser extension VNCNT Access Audit: WCAG 2.2 Accessibility Checker for Google Chrome and Microsoft Edge. Access Audit checks the web page you are viewing for common accessibility problems. The check runs inside your browser. VNCNT Labs never receives the pages you check, the results or anything else you do with the extension, and version 1.0 makes no network requests of its own.
1. When it runs and what it can access
Access Audit runs only when you click its toolbar icon (or press Alt+Shift+A) on a tab. Your browser then gives it temporary access to that tab only ("activeTab"). It adds its panel to the page and runs the bundled, open-source axe-core checking engine on the page as it currently looks. It has no access to other tabs or other websites, and it does not run in the background.
It reads the page's structure, text, colours and attributes to perform the checks (for example whether an image has alternative text or whether text has enough contrast). It does not read cookies, passwords you have saved, your browsing history or other websites' storage.
2. What is stored, and where
- Settings (rule set, grouping, screenshot and blur preferences) in the extension's local storage on this computer. Not synced.
- Free scans are not saved. Results live in the open panel and disappear when you close it or leave the page. "Copy summary" puts a plain-text summary on your clipboard only when you click it.
- Pro (when available): scans you open as a report, and their screenshots, are saved in the extension's own browser storage (IndexedDB) on this computer, up to the 200 most recent, until you delete them (Settings → Delete saved scans) or uninstall the extension.
Uninstalling the extension removes all of it.
3. Screenshots and the Privacy Shield (Pro)
Pro reports include screenshots of the visible part of the page, taken with your browser's screenshot function while the report is created. Before a screenshot is stored, text on the page that looks like an email address, API key or token, or card number (and phone numbers if you turn that on) is blurred in the image, and the same kinds of text are masked in the HTML snippets shown in the report. The Shield reads text, not pictures: text inside images, canvas-drawn apps or embedded frames from other websites cannot be detected. Please review a report before you share it, or turn screenshots off in Settings.
4. On-device AI fix suggestions (Pro)
If your browser offers a built-in on-device language model (for example Chrome's Prompt API with Gemini Nano), Access Audit can ask it to suggest fixes. The prompt contains the rule, its description and the affected HTML snippet (with the Privacy Shield masking applied). It is processed by your browser on your device; Access Audit does not send it anywhere. Your browser may download its model from its own vendor the first time; that download is between you and your browser vendor. When no model is available, Access Audit uses built-in templates instead.
5. Scanning more pages (Pro)
If you choose "Scan more pages", Access Audit lists links on the current page that stay on the same website. You pick which pages to check (up to 25 at a time). Your browser then asks you to allow access to that one website; you can refuse, and you can remove the access later in the browser's extension settings. Each chosen page is opened in a background tab, checked, and closed. Nothing is sent anywhere.
6. Exports and links
Reports (HTML, PDF), Markdown issues and Jira CSV files are created on your computer and saved where you choose. "New GitHub issue" opens github.com in a new tab with the issue title and text pre-filled in the page address, so that text is sent to GitHub when you open the link; nothing is submitted until you press Submit there, and Access Audit has no access to your GitHub account. "Rule details" links open the rule documentation on Deque University's website only when you click them.
7. Pro licence (when Pro launches)
Version 1.0 has no paid features and no licence checks. When Pro launches, purchases and licence keys will be handled by Lemon Squeezy (our reseller and merchant of record). To activate Pro, the extension sends your licence key and an instance name to Lemon Squeezy's licence API, and re-checks it at most once a day. No page content or results are ever sent. Lemon Squeezy's own privacy policy applies to your purchase. This section will be updated before Pro is enabled.
8. What we don't do
- No analytics, tracking, advertising or account.
- No selling or sharing of data. We don't collect it in the first place.
- No remote code: every script is in the extension package.
9. Not a compliance certification
Automated checks find only part of accessibility problems. A clean result does not mean a page is accessible or conforms to WCAG, and Access Audit's results are not legal advice or a compliance certification.
10. Children
Access Audit is a tool for web professionals and is not directed at children under 13.
11. Changes and contact
If this policy changes, we will update this page and its effective date before the change takes effect in the extension. Questions: hello@vncntlabs.com.