Page scans in your browser
The Chrome extension runs axe-core locally on the active page. When you are signed in, results sync to your dashboard with severity, selector, HTML snippet, and fix guidance for each violation.
WCAG scanning, issue tracking
& reporting — for sites that everyone can use.
( Why RedFlag )
RedFlag pairs the axe-core rule engine with a workflow your team will actually use. Every page scan maps violations to WCAG success criteria with a severity, a selector and plain-English fix guidance — so issues get found, tracked and verified instead of rediscovered every audit. Scan from the Chrome extension, manage from the dashboard, hand clients the evidence.
( What it does )
The Chrome extension runs axe-core locally on the active page. When you are signed in, results sync to your dashboard with severity, selector, HTML snippet, and fix guidance for each violation.
Pro reads your sitemap.xml and scans up to 100 pages in one pass — every page aggregated into one domain view, one score, one issue list.
Work the queue: open, in progress, ready to verify, confirmed fixed. A weighted compliance score per domain moves with every scan and every confirmed fix.
Export VPAT/ACR conformance snapshots and CSV issue lists from your live dashboard data for stakeholders and procurement.
( How it works )
No six-week audit engagements. Scans run in your browser, results land in your dashboard, and the score updates the moment a fix is verified.
Add the RedFlag Chrome extension and connect it to your dashboard. Free, no card.
Add to Chrome →One click on any page, or a sitemap crawl across the whole site on Pro. Every violation arrives with a WCAG criterion, severity and selector.
Work issues through the queue — open, in progress, ready to verify — then recheck the exact element to confirm the fix landed.
Export a VPAT/ACR conformance snapshot or CSV from live dashboard data for stakeholders and procurement.
( Why it matters )
RedFlag ("we", "us", "our") is an accessibility auditing tool operated by Qern Pty Ltd, based in the Australian Capital Territory, Australia. Our website is redflagstatus.com.
Account data. When you sign up, we store your email address. We use it to authenticate you, send password-reset emails, and very occasionally notify you of important service changes. We do not send marketing emails.
Scan results. When the extension scans a page it automatically saves accessibility violations to your dashboard. This includes CSS selectors, HTML snippets, axe-core rule IDs, WCAG criteria, and the URL of the scanned page. This data belongs to you. You can delete it at any time from your dashboard.
AI Label Review. If you run the optional "Review Labels" feature, the extension sends each reviewable element to our server using only five fields: CSS selector, HTML tag name, ARIA role, accessible name, and any associated <label> text. We run deterministic checks on the full set, then forward only the subset that still needs human-style judgement to Google Gemini. Page URLs, page indices, and full element HTML are never sent to Gemini. Flagged results, along with any verdict or note you add, save to your dashboard.
Payment data. Pro plan subscriptions are processed by Stripe. We never see or store your card number, CVV, or bank details. Stripe shares a subscription status and customer ID with us so we know which plan you're on. Stripe's privacy policy is at stripe.com/privacy.
Usage data. Our hosting provider, Netlify, collects standard server logs including your IP address and the pages you visit. We do not use third-party analytics scripts. We do not set tracking cookies.
The Chrome extension runs axe-core entirely inside your browser. No page content is transmitted to our servers during a scan. Violation results are automatically saved to your dashboard after each scan so you can track issues over time. You can delete your scan data at any time.
We do not sell your data. We share it only with the sub-processors needed to run the service:
Each sub-processor processes data only as instructed and under confidentiality obligations.
Our login and sign-up pages use Cloudflare Turnstile to protect against automated abuse. Turnstile runs a privacy-preserving challenge in your browser. It does not use tracking cookies or display an image puzzle. Cloudflare may process your IP address and browser signals to verify the challenge. This data is governed by Cloudflare's privacy policy.
The Chrome extension uses chrome.storage.local to store your authentication session and in-progress crawl state. This data stays on your device and is cleared when you sign out or uninstall the extension. We do not use cookies in the extension itself.
The web dashboard sets a session cookie issued by Supabase Auth to keep you signed in. It is a secure, HTTP-only cookie and is cleared when your session expires or you sign out.
We keep your account data for as long as your account is active. If you delete your account, all associated domains, violations, and scan history are permanently deleted within 30 days. Payment records are retained by Stripe for their required period for tax and compliance purposes.
Scan history access by plan. Free plan users can view violation data from the last 3 days in their dashboard. Older data is stored but not displayed until you upgrade. Pro plan users have access to their full, lifetime scan history with no time restriction. Data is never deleted based on plan. Only access in the dashboard is limited.
You can request a copy of your data, correction of inaccuracies, or deletion of your account at any time by emailing us. If you are located in the EU or UK, you have additional rights under GDPR/UK GDPR. If you are in Australia, the Privacy Act 1988 (Cth) applies.
If we make material changes, we will update the "Last updated" date above. Continued use of the service after a change constitutes acceptance of the updated policy.
Questions? Email us at support@qern.com.au.
Cookies are small text files stored on your device when you visit a website. Similar technologies such as localStorage work the same way. We use a small number of them to keep RedFlag working and to understand how the product is used.
Essential. Required for the app to function. You cannot turn these off. They keep you signed in, remember your light or dark theme preference, and protect against cross-site request forgery. Without them, RedFlag will not work.
Analytics (PostHog). We use PostHog to understand which features are used and where people get stuck, so we can improve the product. These record anonymised usage events and are only set when you consent. If you decline, no analytics cookies are set and no usage events are sent.
We do not use advertising or third-party marketing cookies, and we do not sell your data.
When you first visit RedFlag you are asked whether to allow analytics. You can change your choice at any time through the cookie banner, and you can clear or block cookies in your browser settings. Blocking essential cookies will prevent sign-in and core features from working.
We may update this policy as the product evolves. We will revise the "Last updated" date above when we do.
Questions about cookies or your data? Email support@qern.com.au.
RedFlag is an accessibility auditing service consisting of a Chrome browser extension and a web dashboard. It lets you scan web pages for WCAG 2.1 and 2.2 AA violations, track issues over time, and export findings from your dashboard.
By creating an account or using the extension, you agree to these terms. If you do not agree, do not use RedFlag.
You must provide a valid email address to create an account. You are responsible for keeping your login credentials secure. You may not share your account with others or use RedFlag on behalf of someone else without their knowledge.
We reserve the right to suspend or terminate accounts that violate these terms.
Free plan. No payment required. Scanning is limited to a reduced view of violations per page. Saved dashboard data and full violation details require a Pro account.
Pro plan. $15 USD per month, or the price shown at checkout, billed monthly in advance via Stripe. All prices are in US dollars. Pro gives you full violation details, unlimited domains, full-site scanning up to 100 pages per crawl, URL List Scan, AI-assisted review, VPAT export, CSV export, and 1,000 AI credits per month.
Cancellation. You may cancel your Pro subscription at any time from your account settings. Cancellation takes effect at the end of the current billing period. We do not provide pro-rata refunds for partial months.
Price changes. We will give you at least 30 days' notice before changing the Pro plan price. If you do not cancel before the change takes effect, you accept the new price.
You may use RedFlag only on websites you own or have explicit permission to scan. You may not:
You agree to indemnify and hold Qern Pty Ltd harmless from any claim, damage, or expense arising from your use of RedFlag in violation of these terms, including scanning websites without authorisation.
RedFlag uses axe-core to detect accessibility violations automatically. Automated tools cannot detect all accessibility issues. Some WCAG criteria require manual testing, for example, checking that alternative text is meaningful, or that a form can be completed using only a keyboard. RedFlag results should be treated as a starting point, not a complete audit.
We make no warranty that RedFlag will detect every accessibility violation on a scanned page, or that a page with zero RedFlag violations is fully WCAG compliant.
RedFlag and its software are owned by Qern Pty Ltd. You retain ownership of the websites you scan and the data you store in your account. You grant us a limited licence to store and display that data in order to provide the service.
To the maximum extent permitted by law, RedFlag is provided "as is" without warranty of any kind. We are not liable for any indirect, incidental, or consequential damages arising from your use of the service, including reliance on scan results in accessibility audits or legal proceedings.
Our total liability to you in any 12-month period is capped at the amount you paid us in that period.
Your use of RedFlag is also governed by our Privacy Policy, which is incorporated into these terms by reference. By using RedFlag, you agree to the collection and use of your information as described in the Privacy Policy.
We may modify or discontinue features at any time. For material changes that affect paid customers, we will give at least 30 days' notice where reasonably practicable.
These terms are governed by the laws of the Australian Capital Territory, Australia. Any disputes will be subject to the non-exclusive jurisdiction of the courts of the ACT.
Questions about these terms? Email support@qern.com.au.