Who we are
Altpass is an independent software product run by its owner (“we”). The website is served by Cloudflare Pages and the API by a Cloudflare Worker. Payments are handled by Gumroad.
What we fetch
When you check a page or start an audit, our crawler AltpassBot requests that page (and, for audits, the site’s robots.txt, sitemaps and other same-site pages) the way a browser would. When you ask for alt text, the Worker downloads that one image. We only fetch publicly reachable addresses.
What we store
| Feature | Stored | For how long |
|---|---|---|
| Free page check | The result (page URL, image URLs, alt text found) is cached at the edge so repeat checks are fast. Nothing is written to our database. | About 10 minutes |
| Free alt-text generation | A monthly counter keyed to a random browser ID (generated in your browser) and to a salted hash of your IP address. The image and the generated text are not kept. | Counters for the current and past months |
| Paid site audits | Audited page URLs and titles, image URLs, current alt text, the issue found, short surrounding context (nearest heading, ~160 characters of nearby text, link address and text), and the alt text you generate, edit or approve. | Until you delete the audit or site in the dashboard |
| Fix script | Your approved alt texts, keyed by normalised image URL, for the site you set up. | Until you delete the site |
| License | A SHA-256 hash of your license key, your plan, the result of the last validity check, and an encrypted copy of the key so the fix script can re-check it every 6 hours. Monthly usage counts per license. | While the license is in use |
| Rate limiting | A per-minute request counter keyed to a salted hash of your IP address. | Minutes |
We never store image files. Images are downloaded into memory, sent to the AI model, and discarded. We don’t store raw IP addresses, names or email addresses — there are no Altpass accounts.
Your browser
The site uses localStorage (not cookies) for your random browser ID, your license key if you enter one, your writing preferences and your last-known credit balance. Clear your browser storage to remove them. When the checker shows thumbnails, your browser loads those images directly from the site you checked.
AI processing
Alt text is generated by open models running on Cloudflare Workers AI. Cloudflare states that for Workers AI it “does not use your Customer Content to (1) train any AI models made available on Workers AI or (2) improve any Cloudflare or third-party services”, does not make it available to other customers, and stores it only if a storage service is used alongside Workers AI (Cloudflare, “Your Data and Workers AI”). We send the image plus the page context described in the docs; we don’t send it to any other AI provider.
Payments
Gumroad processes purchases and issues license keys under Gumroad’s privacy policy. We receive only the license verification result (valid or not, plan, subscription status) — not your card details.
Analytics
No analytics or advertising scripts run on this site today. If we add privacy-friendly analytics later, this page will say which one and what it collects before it goes live.
Infrastructure
Cloudflare processes requests (including your IP address) to deliver the site and API, under Cloudflare’s privacy policy. Our database (Cloudflare D1) holds the data listed above.
Your choices
- Delete audits and sites at any time in the dashboard; that removes their pages, images and alt texts.
- Site owners can block our crawler with robots.txt — see AltpassBot.
- For anything else, including deleting license data, contact us through your Gumroad receipt.