Last updated: September 2026

What this service does

CWAC Admin is an accessibility scanning platform. It crawls registered websites and runs automated audits against them. Access is restricted to authorised users.

Personal data we process

• Account data — username, email address, organisation and an optional bio, provided at registration.
• Authentication data — a hashed password, and if you enable two-factor authentication a TOTP secret and hashed recovery codes.
• Scan data — results of automated audits of registered websites (URLs, page metadata and issue reports). These relate to websites, not individuals.

We do not use tracking, analytics or advertising cookies, and we do not sell or share personal data with third parties.

Cookies we use

Cookie	Purpose	Duration	Type
cwac_admin_session_v2	Sign-in session	24 hours	Strictly necessary
remember_token	Keeps you signed in between visits	7 days	Strictly necessary
cwac_cookie_consent	Remembers your cookie choice	12 months	Strictly necessary

We currently set only strictly necessary cookies. If optional cookies are introduced in future they will only be set after you choose “Accept all cookies” in the consent banner. You can change your choice at any time by deleting the cwac_cookie_consent cookie and reloading the page.

Legal basis & retention

Account data is processed to provide the service (legitimate interest / contract). Accounts are retained while the service is provided; contact the administrator to have your account and associated personal data removed.

Your rights

You may request access to, correction of, or deletion of your personal data. Contact the site administrator via the project website at civica11y.com.