Privacy Policy
Last updated: August 24, 2026
1. Introduction
ValidateHTML.com (“we”, “our”, or “the Service”) provides free online validation tools, an optional free account, and a paid accessibility monitoring subscription. This Privacy Policy explains what we collect, why, and how long we keep it.
The short version: using the tools requires no account and leaves nothing behind. An account stores your email address and a record of the checks you run. A subscription adds what Stripe needs to bill you and what we crawl on the sites you ask us to watch.
2. Information We Collect
Without an account, when you are simply using a tool:
- Code: HTML, CSS, JSON or XML you submit is processed and immediately discarded. We never store it, whether or not you have an account.
- URLs: When you submit a URL we fetch the content, validate it, and discard it.
- Analytics: Vercel Analytics collects anonymous usage data such as page views, browser type and country. It does not identify you.
If you create a free account:
- Your email address. That is the entire account. There is no password, no name and no profile.
- Your validation history. For each check you run while signed in we keep the tool used, the URL if you checked one, the counts, the score and the findings. We do not keep the code you submitted, in any mode: the findings are the useful part and the source is not ours to hold.
- Sites you register. The address and the name you give it.
If you ask us to email you about the crawl:
- Your email address, on a mailing list held by Resend. It is one list, whether you joined it from the study page or from a report you asked us to send. Signing in never puts you on it.
- Only if you ask. There is a box next to each of those two asks, it is never ticked for you, and leaving it alone changes nothing else.
- One click to leave. Every email carries an unsubscribe link, and using it removes you from the list without touching your account, your sites or your reports.
If you subscribe to monitoring:
- Billing. Stripe collects and holds your payment details. We never see or store a card number. We store your Stripe identifiers, your plan and its status.
- Audits. For each site you ask us to watch we store the pages we read, the findings on each, and the resulting report.
3. Cookies and Tracking
There is no advertising on this site and no advertising cookies. We use two things:
- A session cookie, set only when you sign in. It holds a random token, is HttpOnly so scripts cannot read it, and expires after 30 days. Signing out deletes it here and on our server.
- Vercel Analytics, for anonymous usage statistics.
If you never sign in, no cookie identifies you.
4. Third-Party Services
- Vercel: hosting and analytics. Vercel Privacy Policy
- Neon: the database holding accounts, sites, history and reports. Hosted in AWS us-east-1. Neon Privacy Policy
- Stripe: payments and subscription billing. Stripe Privacy Policy
- Resend: sends sign-in links, reports and the mailing list. Resend Privacy Policy
There are no advertising partners and no affiliate links. Both existed in the past and were removed.
5. Data Security and Retention
- All connections are encrypted via HTTPS.
- Sign-in links and session tokens are stored as one-way hashes, never in a readable form. A sign-in link works once and expires after 15 minutes.
- Report links are long random URLs. Anyone holding one can read that report, so treat it as the document it is. They are excluded from search engines and are not listed anywhere public.
- Validation history is capped at your 200 most recent checks. Older ones are deleted automatically as new ones arrive.
- Audit reports are kept for as long as your account exists, so a report you were sent keeps working.
6. Your Rights (GDPR)
If you have never signed in, we hold nothing that identifies you and there is nothing to access or delete.
If you have an account you can ask us to show you everything we hold about you, correct it, or delete it entirely. Deleting your account deletes your history, your sites and your reports. Write to contact@validatehtml.com and we will act on it.
You can also remove any site yourself from your account at any time, and cancel a subscription from the billing portal without contacting us.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected in the “Last updated” date.
8. Contact
Questions? Contact us at contact@validatehtml.com.