Privacy Policy
Effective August 28, 2026, last updated October 26, 2026. Covers Preflight, Design Check, Pulse, Verdict, Toolbox, Designers, Vantage, and the Accessibility Readiness Report and the Membership.
What we collect
Using a free endpoint on Preflight, Design Check, Pulse, Verdict, Toolbox, or Designers, we log the request itself (the URL, manifest, text, or file you submit, and the result we return) and your IP address. The IP address is kept only long enough to enforce per-day and per-minute rate limits and to compute aggregate statistics. We don't require an account or email to use a free tier.
Content you submit and where it goes. The structural checks on Preflight, Design Check, and Toolbox run entirely on our own servers; nothing you submit is sent to an AI provider. Four things do leave our servers, and only when you ask for them:
- Anthropic (Claude API): Verdict's reviews, Preflight's semantic scans, and Design Check's vision pass send the content you submit to Anthropic to be analyzed. If you send your own Anthropic key in an
x-anthropic-keyheader, the call runs on your account and we never store or log the key. Otherwise the call runs on our key, within a per-caller allowance. Anthropic's handling of API inputs is described in its own privacy policy. - Cloudflare Browser Rendering: Design Check's vision pass takes a screenshot of the URL you give it using Cloudflare's rendering service.
- Visual Studio Marketplace (Microsoft): Preflight's extension scan looks up the VS Code extension you submit by its public name to read its listing details.
- Google: Pulse sends the URLs you give it to Google's Chrome UX Report API and PageSpeed Insights API to read Core Web Vitals. Vantage reads Search Console data from a Google account you connect.
Preflight, Toolbox, Designers, and Pulse also fetch third-party URLs you give them (an MCP endpoint, a robots.txt, a page and up to four of its stylesheets) with no credentials, exactly as any visitor would. We don't store what those sites return beyond the finding we show you. Designers' Pro tier can store named project context you choose to save (for example a DESIGN.md or brand notes) against your key, up to 20 items; it is deleted 30 days after you cancel or when you ask.
Subscribing to a Pro tier, or connecting a Google account to Vantage, involves more:
- Billing: Stripe handles your payment details directly: we never see or store your card number. We keep your Stripe customer and subscription ID, and the API key we issue you, tied to a hashed (not reversible) copy of that key.
- Email: when you subscribe, we send your API key to the email address you gave Stripe, through Resend, our transactional email provider. Pulse Pro also sends its monitoring alerts the same way. We don't send marketing email to customers. If you separately sign up for the monthly studio note (from a site footer or the free accessibility check), we keep that address and the page you signed up from in a subscribers list, send one confirmation email and then about one note a month through Resend, and never share the address. Every note carries an unsubscribe link that deletes the address, or write to support@allthepossibles.com.
- Vantage / Google Search Console: if you connect a Google account, we store an OAuth token (to read, never modify, your Search Console data) and whichever site properties you choose to add as clients. We don't request access to anything beyond Search Console read access and your email address.
Usage analytics: every product logs basic events: which pages get visited, which API/MCP calls get made, and high-level steps like starting checkout, so we can understand how these tools actually get used and fix what's broken. Anonymous visits are tied to two ids, each a one-way hash of your IP address and browser: one rotates every 24 hours and groups same-day activity, the other rotates weekly and lets us tell whether the same visitor came back within a week. Neither is a cookie, neither can follow you past its rotation, and a change of network breaks the link. If you have a Pro API key or a Vantage account, usage tied to that key/account is kept the same way any other account activity is (see above), not anything additional.
Accessibility Readiness Report
The $149 report is a one-time purchase and works differently from the free tools. To order it you give us a website address and an email address. Before you pay, we fetch the start page of that address (and read its robots.txt) to confirm we can read it. After payment, we fetch up to ten public pages of that site, with no credentials and respecting robots.txt, and run automated accessibility checks on the HTML and CSS they return.
- What we store: your email, the site address, and the finished report. The report is kept for 30 days at a long, random link, and then the report text is deleted. Anyone who holds the link can read the report, so share it with care. We also keep a short order record (email, site address, Stripe session ID and order status) for bookkeeping and refunds until you ask us to delete it.
- Payment: Stripe takes your payment on its own page. We never see or store your card number. We receive the payment confirmation from Stripe.
- Email: we send the report link, or a failure notice, to the email address you gave, through Resend.
- Analytics: the order page at /report is counted like any other page on this site. Report links and report contents are not written to our usage events, which hold content-free metadata only.
We don't sell the report or the site address, don't send them to an AI provider, don't add your email to any list unless you tick the box on the free check to receive the monthly note, and don't use your site for anything except producing your report. To have your order and report deleted, write to support@allthepossibles.com.
What we don't do
We don't sell or rent your data to anyone. We don't run ads or ad-tracking pixels on any product. We don't use cookies for tracking, only what's functionally necessary (e.g. keeping you signed into Vantage). The usage analytics above never set or read a cookie and never leave our own servers: no third-party analytics vendor sees your traffic.
Where data lives
Application data is stored in Cloudflare D1 (SQLite, hosted by Cloudflare). Payment processing is handled by Stripe. Neither Preflight nor Design Check currently send your scan/check content to any third-party AI provider on the free tier. See each product's /docs page for exactly what a Pro subscription changes.
Your choices
Email support@allthepossibles.com to request a copy or deletion of any data we hold about you: an API key, a Vantage workspace, or logged request history. We'll confirm once it's done, normally within a week.
Changes
If this policy changes materially, we'll update the effective date above. Continued use after a change means you accept the update.