GabaDrone privacy policy
GabaDrone is a browser extension published by AccessTree, and part of
voluntasOS. This policy describes what it collects, when, and why. It is written
against what the code does; where a sentence here and the code disagree, the
code is the bug.
The short version
- Signed out, and with no AI key of your own set up, nothing leaves your browser. The scan runs locally and the report is generated locally.
- If you add your own Claude API key in Settings, the AI features send data directly to Anthropic. That is a separate company and a separate relationship — see “When Anthropic is involved” below. This is true whether or not you are signed in to voluntasOS.
- Signed in, a page is sent to your voluntasOS account **only when you press
"Walk this page"** — one page, that moment. Never on a timer, never in the
background, never a page you did not ask for.
- We never see your password. Sign-in happens on voluntasos.com.
- No analytics. No telemetry. Nothing is sold, and nothing is shared with anyone beyond the two recipients named on this page: voluntasOS, and Anthropic if you have set up an AI key.
When Anthropic is involved
GabaDrone has three optional features that use Anthropic's Claude: the AI audit, “Capture & Analyze” in Drone Mode, and “Ask AI” on an issue. They do nothing unless you have entered your own Claude API key in Settings. With no key, none of this applies and nothing below is sent.
With a key, the extension calls api.anthropic.com directly from
your browser. It does not pass through voluntasOS, and we never see it.
What is sent:
- For the AI audit: the page's address, and a description of the barriers found — the rule, the failing element's markup, and the text around it.
- For Capture & Analyze: a screenshot of the visible part of the tab, cropped to the area you aimed at.
- For Ask AI: your question, plus the one barrier you asked about — its selector, its markup, and the failure description.
Anthropic's handling of that data is governed by their terms, under the account your key belongs to — not by this policy. If you would rather no page data left for a third party, do not add a key: the scan, the report and the fixes all work without one.
This section was missing until 2 September 2026. The policy said “nothing is sold or shared” and named only voluntasOS as a recipient, while the code had been calling Anthropic. The sentence at the top of this page says that where a sentence here and the code disagree, the code is the bug. In this case the sentence was, and we are saying so rather than quietly editing it.
What is collected, and when
Signed out — nothing
Scanning a page runs entirely in your browser. The results, the report, and the
export are produced locally and no request is made to us. This is the whole
scanner, and it stays available without an account.
Signed in — only the pages you walk
When you press "Walk this page", GabaDrone sends to voluntasOS:
- the page's URL
- the accessibility scan results for that page
- the page's rendered HTML
The rendered HTML is sent because it is the only way to check something built by
JavaScript — a form that does not exist in the source, a menu that appears on
click. It is stored against your account so a barrier can be identified and a
fix targeted at the right element.
If you answer a review question, the answer is stored against that page in your
account. That is the point of an account: there is nowhere else to record it.
Your account
When you connect GabaDrone, the console hands it a session. GabaDrone stores:
- an access token, in
chrome.storage.session— cleared when you close the
browser, and not readable by any page you visit
- a refresh token, in
chrome.storage.local, so reopening the browser does not
mean signing in again
- your email address and organisation name, to show you which account you are
signed in as
GabaDrone never receives, stores, or transmits your password. Sign-in
happens on voluntasos.com in a normal browser tab. We chose this over a
password box in the extension deliberately: a password box would work, and it
would teach you that typing your password into browser chrome is normal, which
is the habit the next malicious extension relies on.
What is not collected
- Your browsing history. GabaDrone does not observe pages you visit; it acts on
one page when you press a button on that page.
- Analytics or usage telemetry of any kind.
- Anything from a page you have not walked.
Site access
GabaDrone asks for no site access when you install it. Reading the page you are
looking at comes from activeTab, which the browser grants for that tab when
you open GabaDrone on it, and which expires. Broader access is requested only if
a feature needs to act on a page you are not looking at, at the moment that
feature is used, and you can withdraw it in Chrome's extension settings.
Where the data goes
To voluntasOS, on infrastructure operated by AccessTree, under your
organisation's account. It is not sold, not shared with advertisers, and not
used for any purpose other than showing you the barriers on your pages and the
fixes for them.
Deleting it
Sign out from the extension or from the voluntasOS console and the session is
revoked immediately — not at expiry, immediately, because a missing laptop
should not have to wait. Pages and answers already recorded belong to your
voluntasOS account and are deleted through it; voluntasOS's own erasure process
covers them.