Privacy Policy

Last updated: August 2026

1. Who We Are

Simply Black and White (simplyblackandwhite.com) is a web accessibility and AEO consultancy. This policy explains how we collect, use, and protect information when you visit our website or use our services.

2. Information We Collect

Information you provide directly:

  • Contact form submissions: name, email address, website URL, service interest, and any message you include
  • Free scan submissions: the website URL you enter for scanning

Information collected automatically:

  • Scan results: accessibility findings, AEO scores, and technical data about the scanned URL (not your personal device)
  • Session data: a temporary session cookie to maintain your login state if you access the internal dashboard

Information we do NOT collect:

  • We do not use analytics tracking (no Google Analytics, no pixel tracking)
  • We do not use advertising cookies
  • We do not collect device fingerprints
  • We do not sell, share, or trade any personal information with third parties

3. How We Use Your Information

  • Contact submissions: to respond to your inquiry and provide requested information about our services
  • Scan URLs: to perform the accessibility analysis you requested
  • Scan results: stored in our database for lead management and to allow you to retrieve results
  • Email address (if you provide one): to send you your requested accessibility snapshot report, and — only if you don't opt out — a single follow-up email about your results. Every email we send includes a one-click unsubscribe link. We do not add you to any marketing list or newsletter.

4. Data Storage and Security

Your data is stored in a SQLite database on our hosting infrastructure. We implement the following security measures:

  • HTTPS encryption in transit (when deployed to production)
  • HTTP security headers via Helmet.js (Content Security Policy, X-Frame-Options, etc.)
  • Rate limiting on all form submissions and scan requests
  • Input sanitization and validation on all user-submitted data
  • No plain-text storage of sensitive credentials

5. Cookies

We use a single essential cookie:

  • sbw.sid: A session cookie used only for authenticated access to the internal scanner dashboard. This cookie expires after 24 hours and is not used for tracking. It is only set if you log in to the dashboard.

We do not use any non-essential, marketing, or analytics cookies.

6. Third-Party Services

We use the following third-party services:

  • Google Fonts: to serve typography (Libre Baskerville, Inter). Google may collect basic request data. See Google's Privacy Policy.
  • Resend: to deliver emails — both internal notifications to us and (if you provide your email) your snapshot report and any follow-up. Your email address is processed by Resend to deliver these messages. See Resend's Privacy Policy.
  • Google OAuth: used only for internal dashboard authentication. We do not access your Google account data beyond basic profile and email for login verification.

7. Data Retention

  • Contact submissions: retained indefinitely for lead management until manually deleted
  • Scan results: retained indefinitely for internal reference and client history
  • Session data: expires after 24 hours automatically

You may request deletion of your data at any time by contacting us through the contact form. If you received an email from us, you can opt out of any further emails using the unsubscribe link included in every message.

8. Your Rights

You have the right to:

  • Request access to any personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Withdraw consent for data processing at any time

To exercise any of these rights, contact us via the contact form.

9. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of our website after changes constitutes acceptance.

11. Contact

For privacy-related questions or data requests, please use the contact form on our website.