Privacy Policy
Effective date: February 4, 2026
A11y Agent is a browser extension built by AccessLint. This policy describes what data we collect, why, and how it is handled.
What we collect
When analytics are enabled, A11y Agent collects:
- An anonymous device identifier (a random UUID generated locally, not linked to any account)
- Product interaction events: audit counts, feature usage (e.g. opening the side panel, copying a selector), and violation category counts (by impact level)
We do not collect page content, HTML, or any personally identifiable information during normal usage.
False positive reports
When you explicitly report a false positive, the extension shows a preview of the data that will be sent. You can uncheck any of the following optional fields before submitting:
- Page URL
- CSS selector of the flagged element
- AI guidance text (if generated)
The following fields are always included in a report:
- Rule ID and impact level
- Violation message
False positive reports are sent to Amplitude as analytics events and are subject to the same consent, retention, and processing terms described on this page. No report is sent without your explicit action.
Why we collect it
We use anonymous usage data to understand how the extension is used, identify popular features, and improve the product.
Legal basis (GDPR)
The legal basis for processing is consent. Analytics are only enabled after you explicitly accept a consent prompt on first use. No data is collected until you opt in.
Third parties
Analytics events are sent to Amplitude, which acts as our data processor. No other third parties receive data from A11y Agent.
IP addresses
Your IP address is transmitted to Amplitude during event delivery, but we set ip: false on every event payload. Amplitude uses the IP only for approximate geolocation during ingestion and does not store it.
Data retention
Events are retained in Amplitude for 12 months, then automatically deleted.
Your rights
Under the GDPR, you have the right to:
- Access your data
- Rectification of inaccurate data
- Erasure of your data
- Data portability
- Object to processing
You can withdraw consent at any time using the analytics toggle in the extension's side panel. This immediately stops all data collection. Since the device ID is anonymous and not linked to any account, erasure is automatic — disabling analytics and uninstalling the extension removes all local data.
Contact
For questions or requests, email support@accesslint.com.
Updates
Changes to this policy will be posted on this page with an updated effective date.