Privacy Policy

Last updated: May 13, 2026

1. Data We Collect

AllyXRay collects and processes the following data locally on your device:

• Page URL and domain — to identify which page was scanned.
• Scan results — accessibility violations, scores, and element selectors found by the axe-core engine on the current page.
• Scan history — stored in chrome.storage.local on your device (up to 100 entries).
• User preferences — theme (light/dark) and scan schedules.

2. Data We Do NOT Collect

• We do not collect personal information (name, email, etc.) in the free version.
• We do not read or store the content of the pages you visit — only the accessibility scan results.
• We do not transmit any data to external servers in the free version. All processing happens locally.
• We do not use cookies or tracking pixels.
• We do not share or sell any data to third parties.

3. Pro Features (Optional)

If you upgrade to AllyXRay Pro, the following additional data processing occurs:

• Account data — email address for authentication (stored securely via Supabase Auth).
• Cloud sync — scan history is synced to a secure cloud database so you can access it across devices.
• Payment data — processed securely by Stripe. We never see or store your card details.
• Assistive technology preference (is_at_user) — a single boolean flag, stored on your account in our Supabase database, indicating whether you have self-identified as an assistive-technology user to unlock Pro features at no cost. We do not record which AT you use, nor any disability-related information. The flag is used only to grant Pro feature access and is visible to Star & Cosmos Technologies LTD staff for support and abuse-prevention purposes. You can toggle this flag on or off at any time from the Account page in the extension; setting it back to false immediately removes the AT-based Pro grant (paid Pro subscriptions are unaffected).

4. Permissions

AllyXRay requires the following Chrome permissions:

• activeTab— to scan the current page when you click "Scan".
• storage — to save scan history and preferences locally.
• scripting — to inject the accessibility scanner into the page.
• alarms — for scheduled re-scans.
• notifications — to notify you when a scheduled scan completes.

5. Third-Party Libraries

• axe-core (Deque Systems) — open-source accessibility engine. Runs entirely in your browser. GitHub

6. Data Retention

Local scan history is limited to 100 entries and can be cleared at any time from within the extension. If you uninstall the extension, all local data is automatically deleted.

7. Your Rights

You can:

• Clear all scan history from the extension at any time.
• Uninstall the extension to remove all stored data.
• Request deletion of your Pro account data by contacting us.

8. Contact