Guide
Scanning pages behind login
Your account area and your checkout are invisible to an anonymous scan. Here is how to cover them, in three moves, without ever handing us your password.
Why these pages matter more than the others
The European Accessibility Act does not target your shop window, it targets your sales service: cart, delivery, payment, confirmation. It is also where the real difficulties are, because these pages are full of forms. A crawler following public links never gets there: without your session, your accessibility statement stays silent about the part that matters legally.
Before you start: verify your domain
This feature is only available on a domain you have proven ownership of, through a tag in your homepage or a DNS record. That is deliberate: without such proof, the tool would allow replaying a session on somebody else's site. Verification takes two minutes on the Domains page of your dashboard.
Copying your session in three moves
1. Sign in to your site as usual, ticking “remember me” if the option exists. 2. Press F12 to open the developer tools, go to the Console tab, type document.cookie then Enter, and copy the line you get. 3. Paste it into Inclaria, Domains page, section “Scan pages behind login”. You can paste everything: we only keep name/value pairs.
Declaring your purchase journey
On the same page, list the steps of your checkout, one address per line and in order: cart, delivery, payment, confirmation. They will be analysed in every audit first, even before your plan's page cap. The report presents them as a journey and highlights the weakest step, because a checkout is worth its weakest link: if payment blocks, the order does not happen, however good the cart is.
When the session expires
It will expire, and that is normal: a session cookie has a limited lifetime. We detect it and send you a message that says so plainly, rather than dropping your score and letting you believe in a regression. You just redo the copy. Ticking “remember me” when you sign in greatly extends that lifetime, often from a few hours to several weeks.
What we do with your cookies
We never ask for your password. Your cookies are encrypted, never shown back to you, never sent anywhere other than the domain you verified, and you can delete them at any time in one click. Signing out of your own site is enough to make them useless anyway. We deliberately built no way to read their value back.
Ready to cover your checkout?
Verify your domain, paste your session, declare your steps. The next audit will cover the lot.
Go to my domainsAn automated audit only covers part of the WCAG criteria. A manual audit by an expert is still required to attest full conformance.