Skiplink

Legal

Everything in one place. Written to be read, and specific to what this product actually does — the privacy notice was written from the database schema, and the accuracy page exists because the marketing is the real liability in this industry.

The agreement

Terms of service
What we owe you, what you owe us, and what we explicitly do not warrant. Section 3 is the one to read: nothing here makes your site compliant.
Acceptable use policy
What you may point the scanner at. The short version is: only what you are authorised to scan. Part of the terms.
Data processing addendum
The Article 28 processor terms, in force automatically for every account. Nothing to sign, no sales call.

Your data

Privacy notice
What we hold, why, for how long. Including the fact that IP addresses exist only as a two-minute counter in Redis and are never written to the database.
Sub-processors
Every company that can touch customer data, what each can actually see, and where.
Cookies
Two, both necessary for signing in. No analytics, no advertising, and therefore no consent banner.

How we build it

Security
How a compromise is contained, how to report a vulnerability, safe harbour for good-faith research, and an honest list of the certifications we do not have.
Scan accuracy
What a Skiplink scan does and does not tell you. See also the coverage reference, which lists all 55 Level A and AA criteria and marks which ones no scanner can check.
Accessibility statement
How accessible this site is, tested rather than asserted — including a list of what we have not tested, which is the part these statements usually omit.
Third-party licences
The open-source software Skiplink is built on, and the attribution axe-core's licence requires.

Company details

Skiplink is a property of ThirteenTabs LTD, a private limited company registered in England & Wales under company number 17326399. The registered office address, the filing history and the officers are all on the public register at Companies House, which is more current than any copy we could keep here.

This is here because you should be able to find out who you are contracting with without reading a contract.

Contact

[email protected] for anything, or [email protected] for a vulnerability. A person reads both.