Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Accessibility platform that adds a customisable widget to a website, lets visitors adjust contrast, font size, navigation and animations, and helps merchants document their WCAG conformance under the European Accessibility Act.
Adally is an accessibility platform that loads a customisable widget on a website. Visitors can adjust contrast, font size, animations, link highlighting, reading masks, text to speech and keyboard navigation. The platform also performs automated WCAG scans and generates accessibility statements that merchants need to comply with the European Accessibility Act and national equivalents.
Adally stores accessibility preferences (e.g. contrast on, large fonts, reading guide) in a first party cookie so they persist between visits. It logs anonymised usage counters (button clicks, profile selections) for product analytics. The compliance dashboard stores account data for the merchant.
Loading the widget itself is generally lawful under Article 6(1)(f) GDPR (legitimate interest in providing an accessible service, reinforced by the European Accessibility Act). The preference cookie can rely on the user request exemption under Article 5(3) ePrivacy because it is set only after the user opens the widget. Aggregated usage signals can use legitimate interest provided they remain anonymous.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Using accessibility features can indirectly reveal a disability, which is a special category under Article 9 GDPR. Avoid linking accessibility preferences to identified user profiles, do not export them to advertising platforms and do not use them for segmentation. If you absolutely need to keep accessibility data with identified users, rely on explicit consent.
Adally is operated from the United States. Transfers rely on Standard Contractual Clauses and the EU US Data Privacy Framework via the Adally DPA. Document the transfer impact assessment and prefer an EU CDN endpoint if Adally offers one.
Sign the DPA, configure the widget to load without third party advertising, only set the preference cookie after the user activates the widget, document the legitimate interest balancing test, expose the choice of profile in your accessibility statement, and avoid combining accessibility usage with marketing or behavioural analytics.
Websites using Adally must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is not normally needed for the accessibility widget itself. It becomes useful when usage data reveals special category information such as disability, especially if combined with logged in customer profiles or behavioural analytics.
Sample consent text
We use Adally (Adally Inc., United States) to offer accessibility features such as contrast, font size and reading aids. Your preferences are stored in a strictly necessary cookie set after you open the widget. The accessibility widget itself loads without tracking advertising data.
Third-party domains contacted
adally.comcdn.adally.comwidget.adally.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| adally_prefs | http | 1 year | Stores the accessibility preferences chosen by the visitor (contrast, font size, reading aids). |
| adally_profile | http | 1 year | Stores the accessibility profile (e.g. cognitive, motor, vision) selected from the widget shortcuts. |
| adally_session | http | Session | Session identifier used by the widget while it is open. |
This service may collect user data. Ensure GDPR compliance with FlowConsent.
Adally sets first party cookies for accessibility preferences (adally_prefs), the selected profile (adally_profile) and a session cookie (adally_session). No advertising cookie is set.
The widget itself can usually load under legitimate interest. The preference cookies can rely on the user request exemption because they are set only after the user opens the widget. If any optional behavioural analytics module is enabled, it must be gated by consent.
Article 6(1)(f) GDPR (legitimate interest, reinforced by the European Accessibility Act). If accessibility preferences are linked to identified user profiles, Article 9 may apply and explicit consent is needed.
Yes, the platform is operated from the United States. Transfers rely on Standard Contractual Clauses and the EU US Data Privacy Framework. Document the transfer impact assessment in your DPA records.
Normally no. A DPIA is recommended when accessibility usage is linked to identified profiles, when it is exported into a CRM or when it is combined with behavioural analytics that could reveal disability.
Sign the DPA, load the widget without third party advertising calls, set preference cookies only after the user interacts with the widget, mention Adally in your privacy notice and accessibility statement, avoid linking preferences to identified users.
Other accessibility platforms include accessiBe, UserWay, EqualWeb, AudioEye, Recite Me, Inclusive Reader and Silktide. Some EU based vendors such as Recite Me offer EU hosting and reduced transfer complexity.
List Adally as a processor under the accessibility category, describe the strictly necessary preference cookies, link to its privacy policy, and refresh the entry whenever you enable an optional analytics module or change the integration.