Privacy Policy

Last updated: October 21, 2026

This policy explains what personal data is processed when you use onlinenexus.org, including the free accessibility scan, and what your rights are under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The controller is Peter Pavelka, trading as OnlineNexus, based in Ireland. Contact for any privacy question or request: privacy@onlinenexus.org.

2. The short version

No accounts, no cookies, no analytics, no advertising or tracking scripts.
To run the free scan we process the web address you enter and, for rate limiting, a scrambled (hashed) form of your IP address, which is deleted automatically about an hour after your last scan.
Scan reports are kept for up to 6 hours, linked to the scanned website's address, not to you.
Our hosting provider, Cloudflare, processes connection data to deliver and protect the site.

3. What we process, why, and for how long

Visiting the website

Data: Connection data handled by Cloudflare when you visit (such as your IP address, browser user agent and the page requested)
Why: To deliver the website and protect it from attacks and abuse
Legal basis: Legitimate interests (running a secure website)
How long: Processed by Cloudflare under its own retention practices as our service provider

Rate limiting the free scan

Data: A hashed form of your IP address (for IPv6, of your network prefix) and the times of your scans
Why: To limit each connection to 5 free scans per hour and prevent abuse
Legal basis: Legitimate interests (keeping a free service available and preventing abuse)
How long: Deleted automatically about 1 hour after your last scan; a separate short-term counter in Cloudflare's rate-limiting feature lasts about a minute

Running the free scan

Data: The web address you submit, and the resulting scan report
Why: To run the scan and show you the results; to serve the same report quickly if the same address is scanned again
Legal basis: Legitimate interests (providing the scan you asked for)
How long: Report cached for up to 6 hours, linked to the scanned address, not to you

Error logs

Data: Technical error logs (for example, an error message and the address being scanned when a scan fails)
Why: To find and fix problems with the service
Legal basis: Legitimate interests (keeping the service working)
How long: Up to 3 days

Emailing us

Data: Emails you send us (your address, name and message)
Why: To reply and deal with your enquiry
Legal basis: Legitimate interests; or steps you ask us to take before a contract
How long: As long as needed for your enquiry and any follow-up

We do not use your data for marketing, we do not sell it, and we do not make automated decisions about you that have legal or similarly significant effects. Paid services are not available yet; if we start taking payments, we will update this policy before we do.

4. Information about the websites you scan

A scan report contains technical information about the scanned website, including short code excerpts (up to three per problem type) from its public pages. Occasionally such an excerpt could include information that appears publicly on that page, such as a name in a product review. We keep reports for up to 6 hours as described above and do not use them for anything else.

5. Who we share data with

Cloudflare, Inc. hosts this website and runs the scanner, rate limiting, caching, logs and email forwarding for our domain, as our processor. Cloudflare's standard Data Processing Addendum applies to our account (Cloudflare DPA).
Google provides the mailbox that emails to our onlinenexus.org addresses are forwarded to.
Authorities or others where the law requires it, or to establish or defend legal claims.

6. International transfers

Cloudflare and Google may process data in the United States and other countries outside the European Economic Area. Cloudflare states that for transfers to the United States it relies on its certification under the EU-U.S. Data Privacy Framework, and on the European Commission's Standard Contractual Clauses where needed (Cloudflare GDPR FAQs). Other transfers rely on similar safeguards recognised under the GDPR.

7. Cookies

This website does not set cookies and does not use analytics or tracking technologies. Cloudflare may ask your browser to send it network error reports if a page fails to load; these do not involve cookies. If we ever add cookies or analytics that need your consent, we will ask first and update this policy.

8. Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Because we do not have accounts and keep IP data only in hashed form for about an hour, we may not be able to link data to you. To make a request, email privacy@onlinenexus.org.

You also have the right to complain to a data protection authority. In Ireland, this is the Data Protection Commission.

9. Changes

We will update this policy if what we do with personal data changes; the date at the top shows the latest version.