Scandiary

Privacy

What we collect, and what we cannot quietly do with it

This page is short because we collect very little. Everything below describes what the code actually does, not what a template says it might do.

What we collect

Data collected, and why
Your website address You type it into the form. It is the site we scan.
Your email address You type it into the form. It is where the weekly report is sent.
The date you signed up Recorded automatically. It is what stops someone from submitting the form a thousand times in an hour.
What our scanner found For each site we monitor we keep a file of previous results — issue types and how many elements were affected. Without it there is nothing to compare this week against, which would leave no product at all.

That is the complete list. There is no account, no password, no name field, no company field, and no phone number, because we would have no use for any of them.

What we do not do

  • No cookies. This site sets none. Not even a “functional” one.
  • No analytics. We do not know how many people read this page.
  • No third-party scripts or fonts. The fonts you are reading are served from our own domain. This matters legally, not just aesthetically — a German court ruled in 2022 that loading fonts from Google’s servers breached the GDPR.
  • No tracking pixels in the emails. We cannot tell whether you opened one.
  • We do not sell, rent, or share your data for advertising. There is no advertising.

Your IP address is a special case, so it gets its own line: our server sees it when you submit the form, because every server sees it. We hold it in memory for a few minutes to stop the same connection from signing up repeatedly. It is never written to disk and never stored alongside your email.

Where it is kept, and who else can see it

We are one person, not a data centre. So the honest answer is that a handful of companies necessarily handle your data on the way through. Here is all of them:

Companies that process data on our behalf
Vercel Hosts this website and runs the form endpoint. Your submission passes through it.
GitHub Stores the list of monitored sites and the scan history, in a private repository. It is not public and not searchable.
Resend Sends the report emails. We use their EU region, in Ireland.
Porkbun Handles our domain, and forwards any reply you send to reports@scandiary.com into a personal mailbox we read.

Nobody else. No CRM, no email marketing platform, no analytics vendor, no data broker. If that list ever grows, this page changes on the same day.

What we do to your website

We visit your public pages the way any visitor would — currently up to five of them, once a week, from our own machines. We do not log in, we do not need a plugin, and we do not put a line of code on your site.

We read the pages to check them against WCAG 2.1 AA using axe-core, the free open-source engine. We do not copy your content, and we do not republish anything we find on your site.

Getting it deleted

Email reports@scandiary.com and say so. No form, no retention offer, no “are you sure”. You will be taken off the list, the weekly scan stops, and the emails stop. In practice this is same-day, because a person does it by hand.

One limitation we would rather tell you than have you discover

The list of monitored sites lives in a version-controlled repository. That is excellent for not losing your data by accident, and awkward for erasing it: when we remove your entry, older snapshots in the repository’s history still contain it.

So deletion happens in two steps. Removing you from the live list is immediate. Purging the history is a separate manual operation, and we will do it if you ask us to — just say “history too” in the email. We are telling you this because the alternative is a page that says “deleted” and means something narrower.

You can also ask us what we hold about you, and you will get the actual lines from the file rather than a summary.

Who you are dealing with

Scandiary is a one-person project, run from Azerbaijan, and it is not a registered company. We think you should know that before you hand over an address.

If you need a named legal contact — for a supplier check, a data processing agreement, or your own compliance file — email reports@scandiary.com and you will get one. We would rather give it to the people who actually need it than publish it on a page that spam bots read.