Privacy Policy

Our Privacy Commitment

Aberio Report is built with privacy as a core principle. We believe accessibility testing should never compromise your data security or privacy.

                Zero Data Collection: Aberio does not collect, store, transmit, or share any personal information, browsing data, or test results. All testing occurs entirely within your local browser environment.
            

1. Information We Do NOT Collect

Aberio does not collect, store, or transmit:

Personal information (name, email, address, phone number)
Browsing history or website URLs you visit
Test results or reports you generate
User behavior, analytics, or telemetry data
IP addresses or device identifiers
Cookies or tracking tokens
Any data about the websites you test

2. Browser Permissions Explained

To perform accessibility testing, Aberio requests the following Chrome browser permissions:

Active Tab Permission

Why needed: To read the DOM structure and analyze interactive components on pages you're actively testing
When used: Only when you click "Start Capture" in the side panel
Data handling: All analysis happens locally; no data leaves your browser

Storage Permission

Why needed: To save test reports locally on your device
Storage limit: Up to 10MB in Chrome's local storage API
Data handling: Reports remain on your device only; you control export and deletion

Scripting Permission

Why needed: To inject content scripts that monitor page behavior during testing
When used: Only on tabs where you activate testing
Data handling: Scripts analyze DOM changes locally and do not transmit data

3. How Aberio Works (Technical Details)

Understanding our technical architecture explains why we truly collect nothing:

No Backend Servers: Aberio does not operate any web servers, databases, or cloud services
Local Processing Only: All noise detection algorithms run in your browser using JavaScript
No API Calls: The extension makes zero network requests to external services
Offline Functionality: Works completely offline after installation
Open Methodology: All scoring algorithms are documented and auditable

4. Data You Generate

Test Reports: When you run tests, Aberio generates .js report files stored locally in Chrome's storage:

You own all reports generated
Export to HTML at any time
Delete individual reports or clear all data
Reports never leave your device unless you manually share them

5. Third-Party Services

Aberio does not integrate with any third-party services:

No Google Analytics or tracking services
No error reporting or crash analytics (e.g., Sentry, Bugsnag)
No A/B testing or marketing platforms
No advertising networks or affiliates
No social media integrations

                Validation Libraries: Aberio uses the open-source axe-core library (by Deque Systems) for WCAG validation. This library runs entirely locally within the extension and does not communicate with external servers.
            

6. Chrome Web Store Compliance

As required by Google Chrome Web Store Developer Program Policies:

Single Purpose: Aberio's sole purpose is accessibility testing
Permission Justification: All requested permissions are essential for stated functionality
No Obfuscation: Our code is not minified or obfuscated in ways that hide functionality
No Malicious Behavior: No cryptocurrency mining, spam, malware, or deceptive practices
User Data Policy: We comply with Google's Limited Use requirements (no data collection = no misuse)

7. Legal Disclaimers

Not Legal Advice

Aberio Report is a technical testing tool. It does not provide legal advice or guarantee compliance with the Americans with Disabilities Act (ADA), Section 508, WCAG, or any accessibility regulations. Consult legal counsel for compliance questions.

No Warranty

This software is provided "AS IS" without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement.

Accuracy Limitations

Automated testing covers ~75-80% of WCAG 2.1 Level AA interactive criteria
Manual testing is required for comprehensive accessibility audits
Screen reader testing and testing with disabled users is recommended
Results should be verified by qualified accessibility professionals

Beta Software

Beta Notice: Aberio is currently in beta. Features may change without notice. We cannot guarantee continuous availability, data persistence, or specific functionality. Use at your own risk.

8. Your Rights & Controls

Data Ownership: You own all .js report files generated
Data Portability: Export reports as HTML files anytime
Data Deletion: Delete reports individually or clear all data in the extension
Uninstall: Removing the extension deletes all locally stored data
No Account: No registration, login, or profile creation required
No Tracking: No user IDs, session tracking, or behavioral profiling

9. Children's Privacy (COPPA Compliance)

Aberio does not knowingly collect information from anyone, including children under 13. Because we collect no data whatsoever, we are inherently COPPA-compliant.

10. International Users (GDPR Compliance)

For users in the European Union:

No Personal Data Processing: Since we collect nothing, there's no personal data to process under GDPR
Data Controller: Aberio Report, LLC is the data controller for any personal information collected through this website (such as email addresses for the certification training). For test reports generated by the tool, you are the sole controller of that data.
No Data Transfers: No data crosses borders because no data leaves your device
Right to Access: All your data is in Chrome storage (chrome://extensions → Aberio → Storage)
Right to Deletion: Uninstall or use in-app deletion features

Data Controller Information:

Aberio Report, LLC
1580 N Logan St Ste 660 #143939
Denver, CO 80203
Phone: (720) 295-3601
Email: AberioReport@gmail.com

11. Security Practices

No Authentication: No passwords or credentials to secure (or breach)
Local-Only Storage: Data stored using Chrome's secure storage API
Content Security Policy: Strict CSP to prevent XSS attacks
Manifest V3: Built on Chrome's latest, most secure extension platform
No Remote Code Execution: All code is bundled with the extension; no external scripts loaded

12. Behavioral Data Collection & Ethics

Aberio collects behavioral interaction data during testing sessions. It's critical to understand what this means for privacy and ethics:

What Behavioral Data Includes:

Keyboard interaction patterns: Tab press counts, focus sequences, dwell time on elements
Pointer movement: Click attempts, hover patterns, interaction sequences
DOM change events: Page element modifications, layout shifts, content updates
Navigation patterns: Page revisits, back-button usage, navigation confusion signals
Timing data: Task completion time, interaction delays, timeout events

Important: While Aberio stores this data locally and never transmits it, behavioral patterns can reveal sensitive information about how you interact with websites. Be mindful when:

Testing pages with personal or sensitive information
Sharing reports that may reveal your interaction patterns
Using Aberio on employer or client systems (get permission first)

Data Minimization Principles:

Aberio follows privacy-by-design principles:

Purpose Limitation: Behavioral data is collected solely for accessibility analysis
Storage Minimization: Reports are stored temporarily; you control deletion
No Identifiers: No user IDs, session tracking, or cross-site correlation
Transparency: All collection methods are documented in our Engine Specs

GDPR / CCPA Considerations for Organizations:

If you use Aberio in an organizational context (employer, client work, research):

Inform users: If you test websites with real user sessions, inform users that behavioral testing is occurring
Obtain consent: Get explicit consent for behavioral data collection if testing involves user research
Secure storage: Aberio stores data locally, but you're responsible for securing devices containing test reports
Data retention: Delete reports when no longer needed for accessibility improvements
Right to explanation: Be prepared to explain how behavioral signals are calculated if users request

                Personal Use vs. Organizational Use: Personal use of Aberio (testing public websites for your own advocacy work) doesn't trigger GDPR/CCPA obligations. Organizational use (employer testing, paid consulting, research studies) requires privacy compliance measures appropriate to your jurisdiction.
            

Ethical Testing Practices:

We encourage ethical testing practices:

Don't test authenticated sections without permission: Only test public pages or pages you have authorization to test
Respect robots.txt and terms of service: Some websites prohibit automated testing
Anonymize reports before sharing: Remove domain names, personal data, or identifying information from reports you share publicly
Compensate user testers: If recruiting disabled users to test with Aberio, pay them fairly for their time and expertise

13. Changes to This Policy

We may update this privacy policy as Aberio evolves. Changes will be communicated through:

Updated "Last Modified" date at the top of this page
Chrome Web Store listing update notes
Our website at www.theaberioreport.com

Continued use of the extension after updates constitutes acceptance of the revised policy. However, since we collect no data, privacy impact from policy changes should be minimal.

14. Contact Us

For questions about this privacy policy, data handling, or to report security concerns:

Email: aberioreport@gmail.com

Website: www.theaberioreport.com

We will respond to privacy inquiries within 30 days.

15. Developer Information

Extension Name: Aberio Report
Developer: Aberio Report, LLC
Address: 1580 N Logan St Ste 660 #143939, Denver, CO 80203
Contact: AberioReport@gmail.com
Website: www.theaberioreport.com

                For Chrome Web Store Submission: This privacy policy is publicly accessible at www.theaberioreport.com/privacy-policy.html and complies with all Chrome Web Store Developer Program Policies regarding user data transparency and privacy disclosures.
            