Privacy
Short version: we store the URL you submit to the free check and the result it produced. We do not track you, we set no cookies, and we run no analytics.
Who we are
nexaaly — a sole proprietorship registered in Denmark, CVR 40643419.
Contact: access@nexaaly.com. We reply to privacy requests within 5 working days.
The free accessibility check
| What | Why | How long |
|---|---|---|
| The URL you submit | To load the page and audit it, and to keep a record of what was checked | 12 months |
| The result summary (issue counts) | To improve the checks and understand what fails most often | 12 months |
| Nothing else | — | — |
We do not store your IP address, set cookies, load analytics, or embed third-party scripts. A short-lived counter in memory rate-limits requests to one per 30 seconds; it is not written to disk and disappears when the service restarts.
Legal basis: legitimate interest (GDPR Art. 6(1)(f)) — operating a tool you chose to use, and improving it. A URL you type in is normally not personal data, but if the one you submit identifies you, the rights below apply to it.
If you write to access@nexaaly.com we keep the correspondence so we can answer you and, where it becomes a business relationship, meet Danish bookkeeping requirements. Mail is hosted by PrivateEmail (Namecheap).
If you become a customer
We store the company details needed to invoice you — name, address, VAT number — and the findings we produced for you. Danish bookkeeping law requires accounting records to be retained; that retention overrides a deletion request for those specific records, and we will say so plainly if you ask.
Payments are processed by Stripe, who act as an independent controller for payment data. We never see or store your card details.
We never publish your findings, name you as a customer, or quote your code without written permission. We may describe anonymised patterns — "an e-commerce site with an unlabelled checkout button" — to improve detection.
Sub-processors
| Who | For |
|---|---|
| PrivateEmail (Namecheap) | Email hosting |
| Stripe | Payments and invoicing |
The website and the accessibility checker run on our own hardware in Denmark. Audits are executed there — page content we fetch during a check is processed in memory and not retained.
Your rights
Under GDPR you can ask for access, correction, deletion, restriction, portability, or object to processing based on legitimate interest. Email access@nexaaly.com; no particular form is needed.
If we handle it badly you can complain to Datatilsynet, the Danish Data Protection Agency — datatilsynet.dk.
Changes
If this policy changes materially we update the date above and describe what changed rather than quietly replacing the text.