Privacy policy

Who we are

WideDoor (widedoor.io) is software that tests online shops for accessibility issues. It is run by Diogo Pires from Lisbon, Portugal, who decides how your data is used (the "controller" under the EU's GDPR). For anything about your data, write to hello@widedoor.io.

What we collect, and why

When you run a free scan or check a shop

• The shop address you enter. We test that public page and one product page linked from it, and show you the result.
• A record for our own accounts: the shop's web address (domain), the number of issues found, how long the test took and whether it worked. This record also goes to PostHog (see below).
• Your IP address, kept for about an hour to limit how many scans one visitor can start. It also appears in our server logs (see below).

A report also records contact details the tested shop publishes on its own home page (such as an email link or phone number), because the tests check that shoppers can find a way to get help.

When you buy a report on our site

• Lemon Squeezy, our reseller and merchant of record, sells you the report and takes the payment as an independent company: you give your details to it directly, and its privacy policy covers what it collects. We never see your card details.
• Lemon Squeezy sends us the order number, your name and email address, the shop address and options you chose, the product, and the amount and tax. We don't store your name with the order.
• We keep the report, its raw test results and your email address with the order, so we can deliver the report, run the retest you can start within 60 days and answer questions about your order.
• Our order log holds a customer code computed from your email address instead of the address itself, so we can count repeat customers. Anyone who already knows your address could compute the same code, so we treat it as personal data.
• If you use a discount code, we ask Lemon Squeezy which code it was and record it with the order number.

We need your email address and the shop address to deliver a report. Without a valid email address, or with a shop address we can't test, we refund the order; without a shop address, we email you to ask for it.

When you buy on Fiverr

Fiverr takes the order and the payment as an independent company, under its own privacy policy. To make your report, we enter Fiverr's order number, the package, your shop's address and any priorities you chose into a GitHub workflow that starts it on our server. The server makes the report the same way as for an order on our site and emails it to our own mailbox, never to you; we check it and deliver it to you on Fiverr, and do the same with your retest. We keep Fiverr's order number, the shop address and the report, and our order log and PostHog record the order with that number and the shop's domain, like any other order. Your Fiverr username and messages stay on Fiverr, apart from Fiverr's own notices of new orders and messages, which reach our mailbox.

When you browse the site

• We count page views and when you leave a page, how far you scroll, and the steps of a scan or purchase. We also record where on the page you click and where your pointer pauses (heatmaps), and clicks on links and buttons, but never what you type into forms. With each event we record the page that sent you here, campaign tags in the link, your browser, device type, screen size, browser language and time zone. We use PostHog, hosted in the EU, through our own address (widedoor.io/ingest).
• Analytics uses no cookies and stores nothing in your browser. PostHog counts visits with a code made from your IP address and browser that changes every day, so it can't follow you from one day to the next. It receives your IP address only to make that code and doesn't keep it. We don't record your screen.
• If Cloudflare asks your browser to prove it isn't a bot, it sets security cookies (such as cf_clearance) that record that the check was passed. We don't turn on any Cloudflare feature that sets cookies otherwise.
• Each page view gets a random id. If you buy, the checkout link carries the id of the pricing page view you bought from, so we can see which visits lead to orders. That links your order, and its shop's domain, to that visit and to the other pages you viewed here that day, because PostHog counts them as one visitor for the day.
• Where your visit started: the campaign tags in the link you arrived by, the name of the website that sent you (not the full address of its page) and the first page you opened here. Our pages carry these along in their own links instead of storing them in your browser. When you scan or check a shop or buy a report, they are sent with it, so our scan and order records and PostHog show which sites and campaigns lead to scans and orders. The checkout link passes them to Lemon Squeezy as well.
• In your browser, the shop address is removed from page links before anything is sent to PostHog. Our server does send PostHog the shop's domain with each scan, check and order record, never your email address.
• If your browser sends Global Privacy Control or Do Not Track, the site doesn't load analytics or carry campaign tags between pages. Our server still records scans, checks and orders, and sends those records to PostHog.
• If you use the dark mode button, your browser remembers that choice on your device; we don't store it.

Server logs

Our web server keeps standard access logs for security and troubleshooting: your IP address, the address you requested (including any shop address or campaign tags in it), the page that sent you, your browser and the other details it sends with each request, and the time. They are deleted after at most 31 days. When the server can't complete a request, for example while we update the site, its error log records your IP address, the address you requested and the other details your browser sends; that log is deleted after at most 90 days. The app's own status and error logs record shop addresses and order numbers, never your IP or email address, and are also deleted after at most 90 days.

When you email us

If you email us, for example by replying to a report email, we keep your message and the name and email address it comes from, so we can answer you and help with your order. Email to our widedoor.io addresses goes to our Google Workspace mailbox.

If we email your business

We may email US online shops about their own public website, and US web agencies and law firms about working with us. For that we collect:

• The business's name and web address, and the business email address it publishes on its own website, plus a first name only when one is published next to that address. We never guess addresses or buy personal data.
• Public business details: for shops, city, state or region, country and number of products; for agencies, their state and the services they list in public directory profiles; for law firms, their business address, phone number, city and state, the public court cases they appear in (by case number) and, for a lawyer who practices alone, the name and address listed in those court records.
• For shops, the result of one automated test of the home page: the types and numbers of issues, and whether an overlay widget is installed.
• When we emailed, whether you replied, and whether you asked us to stop.

We find businesses through public sources: search tools that list websites by the technology they use, directories such as Shopify's Partner Directory and, for law firms, public court records. Email addresses come only from the business's own website. Our email-sending tool (Instantly) and our mailbox provider (Google) hold the list and the emails; none of it is stored with our reports or orders. Our working files, stored with Anthropic, hold only business details (law firm names among them, which can be a lawyer's name) and test results, not the names or personal email addresses of the people we write to. If an email links to our site with your shop's address in the link and you open it, our server logs record that visit like any other.

Reply "no" (or anything like it), or use the unsubscribe link if the email has one, and we won't email you again.

If your business becomes a partner, we also keep the name and business email address of the person we deal with, your discount code, and which orders used it.

Our legal reasons

• Delivering a report you bought, its emails and its retest: to perform our contract with you.
• Recording the contact details a tested shop publishes: our legitimate interest in testing that shoppers can find help.
• The free scan, rate limits, server logs and site analytics: our legitimate interest in running a useful, secure site and knowing how it's used.
• Our order log, repeat-customer counts, where scans and orders came from, and discount codes: our legitimate interest in knowing which channels and partners bring customers, and in crediting partners.
• Answering your emails: our legitimate interest in helping you, or our contract with you when it's about an order.
• Business outreach emails: our legitimate interest in offering a relevant service to a business, about its own public website or about working with us.
• Partnerships: to perform the partner terms we agreed with your business.
• Keeping a do-not-contact list after you ask us to stop: our legitimate interest in respecting that request.
• Tax and accounting records: the law requires them. Lemon Squeezy keeps most of these as merchant of record.

Where we rely on legitimate interest, you can object at any time by writing to us. We don't make automated decisions about people that have legal or similarly significant effects.

Who processes data for us

• Cloudflare sits in front of widedoor.io. Every request to the site passes through its network, which delivers the pages and protects the site from attacks and abuse. It handles your IP address, the address you requested (including any shop address or campaign tags in it) and the other details your browser sends with each request.
• Hetzner hosts the site, order records (with your email address), reports and logs on servers in Germany.
• Resend sends our emails: reports, retests, refunds and requests for missing details to customers, and Fiverr reports and order alerts to our own mailbox.
• Anthropic (Claude) writes the AI-generated sections of Evidence Packs from the automated test results of your public pages, the contact details the shop publishes, and the priorities you chose. We don't send it your email address or payment details. Anthropic also hosts the working files we use to run the business. The outreach and Fiverr records there hold business details only (business names, which for some law firms are a lawyer's name; website addresses; general business email addresses, phone numbers and addresses; court case numbers), test results and Fiverr order numbers. They don't hold the names or personal email addresses of the people we write to, or Fiverr usernames.
• PostHog (EU cloud) counts site usage as described above, and receives the scan and order records without your email address.
• Google (Google Workspace) hosts our mailboxes.
• Instantly sends some of our business outreach emails. We send others by hand from our Google mailboxes, including from our getwidedoor.com and trywidedoor.com addresses.
• GitHub, under its standard terms, runs the workflows we use to update the site and to start Fiverr orders. Their logs hold Fiverr order numbers, shop addresses and the priorities you chose, plus short extracts of our app's status log, which can include shop addresses.

Lemon Squeezy and Fiverr are independent companies, not processors: when you buy through them, you give your details to them directly, and their own privacy policies apply.

Some of these providers process data outside the EU. Resend, PostHog, Google, Cloudflare and GitHub are certified under the EU-US Data Privacy Framework. Anthropic's data processing terms for its API, and Instantly's, include the European Commission's standard contractual clauses. PostHog stores our data in Frankfurt, but its staff and systems in the United States can access it. Anthropic stores data in the United States. Our working files are kept with Anthropic under its consumer terms, without these safeguards, so we keep only business details there. Cloudflare handles each request in the data center nearest you, which may be outside the EU. You can ask us for a copy of the safeguards we rely on.

We don't sell personal data or share it with advertisers.

How long we keep it

• IP addresses for rate limits: about an hour.
• Server access logs: up to 31 days. The web server's error log and the app's status and error logs: up to 90 days. GitHub workflow logs: 90 days.
• Your email address in order and retest records: removed 12 months after the purchase.
• Reports (including the copies emailed to our own mailbox), order records (without your email address) and Fiverr order records: up to 5 years, for our accounts and to answer questions about past reports.
• Our event log of scans and orders, with customer codes: up to 3 years.
• Emails you send us: up to 2 years after our last reply.
• PostHog keeps usage events for 1 year on our current plan (7 years on its paid plans), and we can't shorten that. They hold no name or email address.
• Outreach data: deleted 90 days after we collect it if we never email you, 90 days after our last email if you don't reply, or 90 days after our last conversation if you do, unless you become a customer or partner. Partner details: kept while the partnership runs and deleted 90 days after it ends, except that orders which used your code stay in our order records. If you ask us to stop, we keep only your email address on a do-not-contact list, so we never email you again.
• Tax and accounting records: as long as the law requires.

You can ask us to delete your data sooner.

Your choices

You can ask us for a copy of the personal data we hold about you, in a portable format, or ask us to correct, delete or restrict it, or object to how we use it, by writing to hello@widedoor.io. If you're in the EU or UK, you can also complain to your data protection authority, or to ours, Portugal's CNPD (cnpd.pt).

If this policy changes, we'll update the date at the top of this page.