Privacy Policy
Access Declared has been designed to collect as little information as possible. We do not require accounts and do not ask for names, email addresses, attendee details or organisation profiles through the website.
Information used to create declarations
You do not need an account to create an accessibility declaration.
Access Declared does not require an account and does not ask for your name, email address or attendee information. You may choose to add an event title, which will appear publicly if you publish your declaration.
If you save a declaration as your default, that information is stored locally in your own browser and is not sent to Access Declared.
When you publish a shareable declaration, the declaration content is stored so the public link can work. Published declarations are intended to be publicly accessible to anyone with the link.
A separate private edit link is generated so the declaration can be updated. Anyone with that private link may be able to edit the declaration, so it should not be shared publicly.
Anonymous usage statistics
Access Declared records limited anonymous aggregate information about how the tool is used, such as the number and type of published declarations, which checklist options are selected most or least often, how often declaration text is copied to the clipboard, and how these patterns change over time.
When someone copies the text of a declaration, we add one to a monthly count for that declaration type. This count records nothing else — no declaration content, no links or tokens, and nothing that could connect the copy to a particular declaration, device or person. Copying a public link, a private edit link, or an email or job advert template is not counted at all.
In the same way, when a published declaration page is opened, we add one to a monthly count of views for that declaration type. This count records nothing else — no declaration content, no links or tokens, no device or session identifier, and nothing that could connect a view to a particular declaration or person. Previewing your own declaration before publishing, or opening your private edit link, is not counted at all.
These statistics are used to understand how Access Declared is being used and to identify broader patterns in event accessibility provision and where gaps may exist.
We do not use these statistics to identify individuals or organisations, and they are not linked to names, email addresses, accounts or organisation profiles.
Website analytics
Access Declared uses Google Analytics 4 to understand how people use the website, including which pages are visited, how visitors reach the site and how people interact with it. This information helps us understand overall usage and improve Access Declared.
Google Analytics may collect information including page views, session information, approximate location, device and browser information and referral source. Google Analytics uses cookies and similar technologies to distinguish users and sessions.
Analytics is optional. Google Analytics should only collect analytics data after a visitor has actively chosen to accept analytics cookies. Visitors can reject analytics and continue to use Access Declared normally.
Google Analytics is provided by Google. Access Declared does not use Google Analytics for advertising or personalised advertising.
Feedback submissions
The feedback form does not ask for your name or email address.
The form stores only the feedback category and the written feedback submitted, together with the date and time of submission.
The form does not ask for a name, email address or contact details, and feedback submissions are not connected to declarations.
The form uses Cloudflare Turnstile to protect against spam and automated abuse. Turnstile processes limited technical information, such as your IP address and browser signals, in order to verify that a submission is genuine. This verification information is not stored with your feedback.
A copy or notification of feedback may be sent to the Access Declared inbox so it can be reviewed.
Because the form does not ask for contact details, Access Declared cannot reply directly to feedback submitted through it.
If someone chooses to contact Access Declared separately by email, their email address and any information they include will be visible to the recipient and handled only for the purpose of responding to that message.
Service providers
Access Declared uses third-party services to host and operate the website, store published declarations and feedback, and protect forms from abuse.
These providers may process limited information only where necessary to provide their services. Access Declared does not sell personal information or share information with advertisers.
The current providers are Lovable (hosting and deployment), Supabase (database storage for published declarations and feedback), Cloudflare Turnstile (spam protection for the feedback form), Google Analytics (website usage analytics where consent has been given) and Resend (used to send feedback notification emails to a Gmail inbox so feedback can be reviewed).
Cookies and browser storage
Access Declared uses browser storage for essential website functions, including remembering accessibility preferences, reusable default declarations and unfinished declarations that can be restored after refreshing or returning to the tool. This information remains in the user's browser unless they clear it.
Access Declared also uses optional Google Analytics cookies to understand how the website is used. These analytics cookies should not be set unless the visitor actively chooses to accept analytics.
Cloudflare Turnstile, used on the feedback form for anti-spam, may set its own storage before a cookie choice is made, as it is strictly necessary for that form to function.
The specific browser storage entries Access Declared uses are: a consent choice (remembering whether analytics cookies were accepted or rejected), a draft declaration in progress (restoring an unfinished declaration if the page is refreshed or revisited), saved default declarations or templates (reusable checklists you have chosen to save), an accessibility toolbar preference (such as font size or contrast settings), and a display preference on public declaration pages (remembering how you last chose to view a declaration).
Visitors can reject analytics cookies without affecting their ability to use Access Declared. They can also change their analytics preference later using the Cookie settings link.
How long information is kept
Once a declaration is published it is stored indefinitely. There is currently no automatic expiry, and public and private links do not stop working after a set period.
Feedback is retained only for as long as needed to review and improve Access Declared, after which it may be deleted.
Anonymous aggregate Access Declared usage statistics may be retained to measure long-term trends. Google Analytics data is retained in accordance with the retention settings configured for the Access Declared Google Analytics property.
Access Declared may remove old, unused or inappropriate content where necessary.
Your rights
Depending on the information involved, UK data protection law may give you rights including access, correction, deletion, restriction or objection.
There is no self-service delete button at the moment. To have a published declaration removed, send its public link using the feedback form and it will be deleted manually. The same route can be used to ask about anything else stored by Access Declared.
Because Access Declared deliberately avoids collecting identifying information, it may not be possible to connect an anonymous declaration or feedback submission to a particular person without the relevant public or private link.
You can also raise a concern with the Information Commissioner's Office.
Contact
For privacy questions, contact: accessdeclared@gmail.com
Updates to this policy
This policy may be updated when the way Access Declared operates changes. The latest version will always appear on this page.
Last updated: 5 August 2026