Privacy Policy

When you scan a website, SiteSmoke collects:

• The URL you submit and the publicly visible HTML of the pages we scan
• Accessibility violations found by our scanner, including the HTML elements involved
• Screenshots of violation elements on the scanned pages
• Your IP address for rate limiting purposes (not stored permanently)

We do not collect personal information, email addresses, or account credentials. No signup is required to use SiteSmoke.

• We do not access password-protected pages
• We do not store cookies from scanned sites
• We do not collect personal data from scanned site visitors
• We do not sell, share, or transfer scan data to third parties

Scan data is used to:

• Generate your accessibility report and compliance score
• Display your badge on verification pages (if you install the badge)
• Improve our scanning engine and accuracy over time (aggregate, anonymized)

Scan results are stored indefinitely to support permanent report URLs and badge verification. If you would like your scan data removed, contact us and we will delete it within 30 days.

SiteSmoke uses the following third-party services:

• Supabase — database hosting (scan results and badge data)
• Vercel — web hosting and CDN
• Anthropic (Claude API) — AI-generated accessibility explanations and code fixes

Each of these services has their own privacy policies governing how they handle data.

If you install the SiteSmoke badge on your website, your domain name, accessibility score, and last scan date become publicly visible on your verification page at /verify/[domain]. This is by design — the badge is a public signal of your accessibility commitment.

Removing the badge from your site does not delete your scan data, but it will prevent re-scans.

You have the right to:

• Request a copy of the data we hold about your scanned site
• Request deletion of your scan data
• Request that your domain be excluded from future scans

To exercise any of these rights, contact us at the email address listed below.