Privacy & Cookies Policy

Last updated: November 5, 2026

1. Preamble

This policy explains how WebMax, Inc. (“WebMax,” “we,” “us” or “our”) collects, uses, shares and handles information when you use webmax.co and our services. It also describes the toolbar's browser-based features and how to contact us about your information.

2. Information Collection

2.1 Information you provide

We collect the contact information you choose to provide when you contact us or use a form, such as your name and email address, together with the contents of your request. Please do not send passwords, full payment card numbers or unnecessary sensitive information in support messages.

2.2 Scanner information

When you request a scan, you provide the page URL, an email address and the selected WCAG level. The scanner retrieves the page content needed to run the automated check and produces scan results identifying issues found by that check. Submitted URLs, page content and findings may themselves contain personal information. Do not put passwords, private access tokens or sensitive personal information in a submitted URL.

2.3 Account and billing information

When you create an account or purchase a subscription, we use the account and contact details you provide, your selected plan and billing information to administer the account and subscription.

Card numbers are handled by Stripe. Full payment card numbers are entered in Stripe's forms in your browser and go to Stripe; they are not stored on WebMax's servers. WebMax keeps the Stripe customer ID, and for saved cards the card brand (type), last 4 digits, and expiry, along with Stripe payment-method identifiers needed to charge a saved card.

2.4 Toolbar settings and browser requests

The toolbar applies display and interaction settings in your browser while you use a page. Settings are kept in page memory for that visit. The live toolbar does not store those preferences in localStorage or sessionStorage. It requests configuration from WebMax using the website's toolbar identifier and may load supporting scripts and styles. These requests connect your browser to WebMax and the providers serving those files. WebMax uses the request to look up the toolbar license and may count it against a remaining request limit. Read-aloud uses your browser's built-in speech features; the toolbar code reviewed for this policy does not send that read-aloud text or speech audio to WebMax for recording.

2.5 Text to Voice

The toolbar's Text to Voice feature reads pages aloud using the speech functionality built into your browser. Some browsers or operating systems may use their own online speech services to produce the voice. Those services are handled by the browser or operating-system provider under its own privacy policy.

Helps visitors. Doesn't replace fixing your site.

3. Utilization of Information

We use the information described above to:

  • Provide the requested scan and its results.
  • Set up and manage accounts, subscriptions and billing.
  • Apply toolbar settings and deliver its configuration and supporting files.
  • Respond to requests and communicate about our services.
  • Meet legal obligations and address misuse or disputes.

Unsolicited product feedback is addressed separately in our Terms and Conditions. Submitting a scan URL or customer data does not transfer ownership of it to WebMax.

4. Cookies

On public pages we checked, the site sets first-party cookies used to run the site securely:

  • XSRF-TOKEN — helps protect forms from cross-site request forgery (about 2 hours).
  • webmax_session — keeps your session while you browse (about 2 hours; HttpOnly).

Our home and scanner forms use Cloudflare Turnstile to help check for automated submissions. The site loads supporting files from jsDelivr, and the toolbar loads supporting files from unpkg and WebMax's script domain (script.webmax.co). These are form or supporting-file services, not advertising pixels. We don't use Google Analytics, Google Tag Manager, or Meta/Facebook advertising pixels. A Facebook profile link in the footer is not a pixel.

Because we don't use advertising or analytics cookies and don't sell or share personal information for cross-context advertising, we don't show a cookie banner or a separate opt-out link. You can manage cookies through your browser settings. Removing or blocking them may affect features that depend on them.

5. Data Sharing and Disclosure

We do not sell personal information.

We may disclose information to service providers as needed to operate the website and deliver requested services, including Stripe for payments, Cloudflare for Turnstile form checks, and providers serving scripts and other supporting files described above.

We may also disclose relevant information when required by law or where necessary and lawful to address fraud, misuse, disputes or legal claims.

“Sharing” for California cross-context behavioral advertising is distinct from ordinary service-provider disclosures. We don't use advertising pixels for that kind of sharing.

6. Data Security and Retention

No method of Internet transmission or electronic storage is entirely secure. Do not submit information you do not want processed as part of a scan or support request.

We keep personal information while your account is active and as needed to provide the services, administer billing, handle requests, meet legal obligations, and resolve disputes. To ask us to delete your information, email support@webmax.co. We will review the request and delete personal information we no longer need to keep, subject to legal exceptions (for example, records we must retain for tax, fraud prevention, or disputes).

7. User Rights

7.1 General requests

Depending on applicable law, you may have rights to access your personal information, correct it, request deletion, or object to or restrict certain uses. Email support@webmax.co to make a request or ask about information handled by WebMax. Explain your request and provide enough information for us to locate the relevant records; do not send full card numbers or passwords.

7.2 California rights

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to your information and our handling of it, your rights may include:

  • Knowing the categories and specific pieces of personal information collected about you, their sources, the purposes of use and the categories of recipients.
  • Requesting deletion, subject to legal exceptions.
  • Correcting inaccurate personal information.
  • Opting out of the sale of personal information or its sharing for cross-context behavioral advertising.
  • Limiting certain uses or disclosures of sensitive personal information, where applicable.
  • Exercising these rights without unlawful discrimination.

Use support@webmax.co to contact us about these rights. You do not need to create an account to submit a request. We may need to verify your identity for an access, correction or deletion request and may request evidence of an authorized agent's authority. We do not require identity verification for a sale-or-sharing opt-out, although we may need enough information to apply the request to the relevant information. To make an opt-out request, email support@webmax.co.

We will not unlawfully discriminate against you for exercising applicable privacy rights. Requests and any lawful exceptions are handled under the law that applies.

8. Policy Amendments

We may update this policy. We will post the revised policy here with an updated date and provide any additional notice required by applicable law.

9. Contact Information

For questions about this policy or privacy requests, contact:

WebMax, Inc.
support@webmax.co
300 S Coast Hwy
Laguna Beach, CA