Privacy Policy

Last updated: September 2026

Who is responsible

AccessRadar is operated from Israel. For anything in this policy — access, a copy, correction, deletion, or simply a question — write to hello@eaaradar.com and a person will answer.

Israel is recognised by the European Commission as providing an adequate level of data protection (Decision 2011/61/EU), so personal data may be transferred there from the EU without additional safeguards.

Free scans

Running a free scan requires no account. We fetch the public page you name, analyse it in memory, return the result, and discard it. We do not keep a copy of your page content and we do not store the scan.

What we store

• If you request a report: your email address and the address you scanned.
• If you subscribe: your email address, the pages we monitor for you, and the results over time — that history is the product.
• If you sign in with Google: your email address and the identifier Google gives us for your account, so we can show you your own sites and nobody else’s.
• Rate limiting: a short-lived counter against your IP address, so one visitor cannot exhaust the free scanner. It expires within a day.
• Payment details: we do not take card payments and we never see a card number.

Where your data is

Your monitoring data is stored in a database in Frankfurt, Germany, inside the European Union. The code that runs your scans also executes in Frankfurt.

Who else processes it

We use four service providers, and it is only fair that you know which:

• Supabase — the database holding your sites and results, and the service that verifies your sign-in. Hosted in Frankfurt, in the EU.
• Vercel — hosting for this website and for the code that performs the scans, configured to run in Frankfurt, in the EU. Vercel also counts visits to our pages; what that involves is described below.
• Google — identity only. If you choose to sign in with Google, Google confirms to us who you are and gives us your name and email address. It never gives us your password, and we never see it.
• Resend — delivery of the emails we send you. Resend is a company in the United States, so the contents of those emails — your site addresses and your scores — pass through servers outside the EU in order to reach your inbox.

We do not sell data, we do not build advertising profiles, and we do not share your scan results with anyone else.

How we count visits

We use Vercel Web Analytics to see how many people open our pages and which pages they open. It is the only measurement on this site, and it works without cookies: it sets nothing on your device and stores no identifier that would let anyone recognise you on a later visit, or follow you to another website.

What is recorded is the page, the country, and the kind of device and browser — the sort of thing a server log contains. Your IP address is used to derive the country and is not stored. We do this because we would otherwise have no idea whether anybody is reading this at all.

Your free trial

Monitoring starts with fourteen days during which the full report is unlocked. If you do not continue, we stop showing the detailed findings; your record and its history remain until you ask us to stop monitoring, and are then deleted as described below.

Your rights under the GDPR

You may request access to your data, a copy of it, correction, restriction, or complete erasure, at any time, by emailing hello@eaaradar.com. We respond within 30 days. You also have the right to complain to your national data protection authority.

Retention

Scan history is kept for as long as we are monitoring a site, and deleted 30 days after monitoring stops. You can stop monitoring at any time using the unsubscribe link at the bottom of every email we send. Detailed findings are discarded after 40 days if they are not refreshed. Enquiries that never become customers are deleted after 12 months.

Cookies

We use one cookie, and only if you sign in. It holds your account identifier and your email address, signed so it cannot be altered, and it is what keeps you signed in for thirty days. Signing out deletes it.

A second, temporary cookie exists for a few minutes during the sign-in itself. It carries a one-time value that proves the trip to Google and back was really yours, and it is discarded the moment you arrive.

Both are strictly necessary for a service you have asked for, which is why there is no consent banner on this site. We use no advertising cookies and no analytics cookies — the visit counting described above sets nothing on your device. If you never sign in, we set nothing at all.