Legal.

Privacy policy

WCAGdesk stores: your account email, the URLs you scan, the scan results (violation lists, screenshots if generated, severity scores), and Paddle billing identifiers. We do not sell or share this data.

Free scans are logged with the requesting IP for rate limiting. The IP is retained for 30 days and then deleted. Email addresses you provide alongside a free scan are used solely to send you the report.

Email delivery uses a transactional SMTP provider. Payments and customer data are handled by Paddle as merchant of record.

Data subject requests under GDPR: email privacy@wcagdesk.eu. We respond within 30 days.

Terms of service

Seller of record. WCAGdesk is operated by SideLabs (sole proprietor: Sergei Gordienko). Subscription sales are processed by Paddle.com Market Ltd as Merchant of Record on behalf of SideLabs — Paddle handles invoicing, EU/UK/US VAT, and consumer-protection statutory obligations as the contractual seller. Your card statement will show "Paddle.net" or "Paddle * SideLabs". Seller ID with Paddle: 301043.

WCAGdesk is provided "as is" without warranty of any kind, express or implied. You agree not to use the scanner against sites you do not own or have permission to test. We respect robots.txt and rate-limit our crawler; you can block our user agent (WCAGdesk/0.1) at any time.

Subscriptions renew monthly as selected. Cancel any time from your account; you keep access until the end of the current billing period. Refunds within 14 days of the first charge upon written request to billing@wcagdesk.eu (German FernAbsG / EU consumer-rights compliance).

Limitation of liability. Our maximum aggregate liability for any claim arising from your use of WCAGdesk is limited to the fees you paid us in the twelve (12) months preceding the event. We are not liable for indirect, consequential, or punitive damages, lost profits, or third-party legal costs. This limitation applies to the maximum extent permitted by applicable law; mandatory statutory rights (including under EU/German consumer law) are not affected.

Not legal advice. WCAGdesk produces technical artifacts (scan reports, accessibility statements, timestamped audit trails). Whether those artifacts are admissible or persuasive in any legal proceeding is a determination for your counsel and the court. The accessibility statement generator and Abmahnung response letter are drafts based on scan data and standard templates; you remain responsible for the final published version and for full WCAG conformance, which automated scanning alone cannot guarantee.

Governing law. These terms are governed by the laws of the Federal Republic of Germany, excluding the UN Convention on Contracts for the International Sale of Goods. Exclusive jurisdiction for disputes with merchants (B2B) is Berlin, Germany. Consumer customers retain statutory choice-of-law and forum rights.

Accessibility statement

WCAGdesk is committed to digital accessibility. This site targets WCAG 2.1 level AA conformance and EN 301 549 V3.2.1. We test it with the same scanner we sell, monthly, and publish each report's SHA-256 hash and RFC 3161 timestamp in the page footer.

Known limitations: the sample report artifact on the homepage is a styled HTML mockup with text alternatives provided in the surrounding paragraph. The PDF artifacts produced by the scanner are tagged PDF/A-2b.

If you encounter an accessibility barrier on this site, email access@wcagdesk.eu. We respond within 5 business days and aim to fix substantive barriers within 30 days.

Last evaluated: 2026-05-14. Method: WCAGdesk automated scan against the live site (severity score 0 / 0 critical / 0 serious findings at last assessment). Manual expert review by a CPACC-certified consultant is planned post-launch.

Imprint / Provider information

Provider information per Directive 2000/31/EC Art. 5 (e-commerce directive). German § 5 TMG / § 18 MStV apply analogously where service is offered to recipients in Germany.

SideLabs (trading name)
Operated by: Sergei Gordienko, sole proprietor (Georgia)
Address: Tbilisi, Georgia (full street address provided on written request to hello@wcagdesk.eu for legal-process purposes)

Email: hello@wcagdesk.eu
Editorial responsibility per § 18 MStV: Sergei Gordienko
Tax status: Georgian sole proprietor; not VAT-registered. EU/UK/US VAT on sales is collected and remitted by Paddle.com Market Ltd as Merchant of Record (see Terms of service).

Data Processing Agreement & subprocessors

For business customers (Defense and Counsel tiers) we provide a GDPR Article 28 Data Processing Agreement on request. Email dpa@wcagdesk.eu with your company name and we'll send the DPA pre-signed by us, ready for counter-signature.

Active subprocessors as of 2026-04-09:

• Hetzner Online GmbH (DE) — application hosting, scan storage, encrypted session-state storage. EU region only.
• Paddle.com Market Ltd (UK/EU) — merchant of record, payment processing, VAT handling.
• Postmark / SMTP relay (US, GDPR SCCs in place) — transactional email delivery (magic links, scan completion notices).
• freeTSA.org (DE) — RFC 3161 trusted timestamp authority. Per-scan hash transmission only; no customer-identifying data. Upgrade to qualified TSA (Sectigo / GlobalSign) planned Q3 2026.
• drpc.org / Polygon mainnet (decentralized) — weekly Merkle-root submission to 0xEc9fE204…CeE6a. Public blockchain; only the 32-byte aggregate root is on-chain (no per-scan or customer data).
• Plausible Insights OÜ (EE) — privacy-respecting analytics on marketing pages. No cookies, no IP retention.

We notify customers in writing at least 14 days before adding or replacing a subprocessor.