Privacy
What we collect, what we do not, and why there is no cookie banner. Written to be read, not to be survived.
What we collect
Two things, and nothing else.
1. What you send us through the free-scan form. Your name, email address, the store URL you want scanned, and your note. That is posted to a small function on our own domain, which emails it to Parveen and forgets it — nothing is written to a database, because there is no database. Your IP address appears in that email so abuse is traceable, and nowhere else. The email carries your address as the reply-to, so replying goes straight back to you.
2. Aggregate page analytics. We use Vercel Web Analytics, which is cookieless. Its script is served from our own domain, so your browser makes no request to any third party. Per the vendor's documentation, each page view may record:
- the time of the visit
- the page URL, its route pattern, and the query string
- the referring page, if you arrived from a link
- approximate location — city, region and country, derived from your IP address
- your operating system, browser and version, and whether the device is a phone, tablet or desktop
- a visitor identifier computed as a hash of the incoming request, which the vendor states is discarded after 24 hours
We see this only as aggregate counts — how many people read a page, and roughly where from. We cannot single you out in it, and we do not try.
Source for that list: Vercel's Web Analytics privacy documentation, read on 30 July 2026. We list city-level location because that is what the vendor documents, not the vaguer "country" we first assumed.
What we do not do
- No cookies. Nothing is stored on your device by this site.
- No cross-site tracking. Nothing follows you to or from another website.
- No advertising or retargeting pixels. No Meta, LinkedIn, Google Ads or any other ad tag. Ever.
- No session recording. We do not replay your mouse, your scrolling, or what you typed. On a form where people describe a legal problem, recording that would be indefensible.
- No third-party scripts, fonts, or images. One script, served by us. You can verify that in your browser's network tab.
- No selling, sharing, or profiles. We build no profile of you and pass your details to nobody.
- No open-tracking pixels in our emails. If we write to you, we do not get told when you opened it.
Why there is no cookie banner
Because nothing is stored on your device, so there is nothing to ask you to consent to. A banner would be theatre.
We are not claiming that no privacy law applies to us. The analytics above is collected server-side, and rules like the GDPR govern that whether a banner exists or not. That is exactly why this page tells you what is collected instead of hiding behind the absence of one.
Deleting your data
Email parveen@mendaccess.com and we will delete your enquiry and our correspondence about it. No form, no account, no waiting period — just ask. If a scan has already produced reports for you, say whether you want those deleted too.
The analytics counts cannot be deleted individually, because they are aggregate and contain nothing that identifies you.
When we scan your site
A scan requests your pages like a browser would, honors robots.txt, and spaces its requests. It stores what it found: screenshots, the accessibility tree, and a screen-reader transcript of your pages. Those artifacts are yours; we hold them for the engagement and share them with nobody.
We do not scan a site without written authorization from someone empowered to give it.
Hosting
These pages are served by Vercel, which — like every web server — records requests in its own logs. We do not add anything to that, and we do not read it.