// privacy
Privacy
What VPAT Vault does with your data: as little as possible.
Chrome extension
The extension runs locally in your browser. Nothing is uploaded by VPAT Vault. There is no account, no sign-in, and no analytics or behavioral tracking built into the extension.
The extension only downloads a scan JSON file to your device after you take an explicit action to export it. That file is never sent anywhere by VPAT Vault.
What the exported JSON can contain
Because the scan reflects the page you scanned, the exported JSON may include page content such as CSS selectors, relevant HTML snippets, and failure summaries drawn from the page. You control where that downloaded file is subsequently shared, reviewed, or stored.
Prompt toolkit
The prompt toolkit operates entirely within your own Codex or Claude Code project environment. It does not call a separate VPAT Vault service and does not transmit your evidence to us.
Questions
See Support or the product page.