ADA Tool widget script

This address hosts the ADA Tool script and receives the problem reports sent from the websites that use it.

What the script does

Adds an accessibility menu where visitors can change text size, spacing, contrast, fonts and motion. Their choices stay in their own browser.
Adds an accessibility statement and a "Report a problem" form, so visitors can tell the site owner what does not work.
Applies a few safe automatic fixes, such as a skip link and a visible keyboard focus ring.
Gives site owners an audit mode that runs automated WCAG checks on a page.

What it does not do

It does not make a website accessible, ADA compliant or WCAG conformant, and it does not prevent legal claims. No script can. Accessibility problems have to be fixed in each site's own code and checked by people, including people who use assistive technology. The script never guesses ARIA labels or alt text and never detects assistive technology.

Install

Current version: 0.2.0. Put this in the <head> of every page, with your own organization name and contact email:

<script src="https://ada.shmosoftware.com/v/0.2.0/ada-tool.min.js"
        integrity="sha384-9TFbhZILUZrl3QplswYXrsrvo39E1eIL3vIQ0+2G6B2DtPLqqO5Lcz4gBH1oXA7e"
        crossorigin="anonymous"
        defer
        data-org-name="Shmo Software"
        data-contact-email="access@shmosoftware.com"
        data-report-endpoint="https://ada.shmosoftware.com/report"></script>

The address with the version number never changes, and integrity makes the browser refuse the file if a single byte differs. https://ada.shmosoftware.com/ada-tool.min.js always serves the newest version (browsers re-check it every five minutes), but it cannot be used with integrity.

Every published version and its hash: version.json.

Privacy

The script sends nothing unless the site owner sets it up. A problem report is sent only when a visitor submits the form, and this service keeps the visitor's accessibility settings only when they tick the box to share them. Page addresses are stored without query strings, and IP addresses are not stored. The script has no tracking, analytics or advertising.