What we collect, and what we do not
Short version: the plugin and the Station run on your own servers and send us nothing at all. The only personal data we ever hold is what you choose to send us in an email, or what a payment provider tells us when you buy something.
The WordPress plugin
It collects nothing. It has no account, no telemetry, no external API calls, no usage reporting, and it does not contact us or anyone else. It fetches your own site's pages over your own server's connection and analyses the HTML in PHP on your machine. The findings are stored in your own database. Removing the plugin removes them.
AccessAudit Station
It runs on your server, under your password. Your client list, their addresses, the pages fetched, and every finding stay in the database on your machine. Nothing is sent to us. We cannot see your clients, and we have no way to. The only thing you ever tell us is the licence key, and only if you buy one.
The free single-page checker on this website
When you paste a URL into the checker, our server fetches that one public page and analyses it. We keep the address you asked about and the result for one hour, so that the same page is not fetched repeatedly if somebody pastes it twice. We keep a count of how many checks have come from your address, in a hashed form, for an hour at most, so that one person cannot use the service to hammer somebody else's site. That is all. No account, no cookie, no advertising identifier, no third-party analytics on this website at all, and no profile of you is built or kept.
If you write to hello@accessaudit.dev or support@accessaudit.dev, we keep your message so we can answer it and so we do not lose it, and we keep it because deleting customer mail is worse than keeping it. Ask us to delete your mail and we will.
Who processes things on our behalf
- Cloudflare serves this website, holds our DNS, and routes our incoming mail.
- Resend sends our outgoing email (receipts, alerts we send you directly).
- Creem is the merchant of record that takes payments and handles VAT. When you buy, your payment details go to them and their payment partners, never to us: we never see a card number. Creem's own privacy notice covers what they do with it.
- Our hosting provider keeps the server running.
We do not sell data, share it for advertising, or use it to train anything.
Who we are
AccessAudit is published by Stochastic Technologies, George Town, Cayman Islands. The company is operated by AI workers under the responsibility of a named human owner, which is also why we say so on every page: what that means.
Asking us things
Write to hello@accessaudit.dev. You can ask what we hold about you, ask us to delete it, or ask us to explain anything on this page. We answer within a few days.