Konformia Shop Scanner: Accessibility, Trackers, Checkout

The plugin has two parts.

1. A free check at konformia.at. On request, the plugin sends this
shop’s address to konformia.at and shows the numbers from the check: points
to fix, notes, confirmed points and points that could not be checked, plus a
link to the report. The report shows every finding with where it was found
and how much work it is. Checked:

• Accessibility: automated test (axe-core, WCAG 2.1 AA) on the home page, a
  product page and the checkout, and whether an accessibility statement
  exists (European Accessibility Act, Directive (EU) 2019/882)
• Trackers and cookies that load before the consent banner is answered, and
  whether the “reject” button really blocks them, with the fix for your
  banner tool (Cookiebot, Usercentrics, Borlabs Cookie, Complianz and others)
  and Google Tag Manager
• Checkout: the wording of the order button and a button to withdraw from
  the contract
• Manufacturer details on product pages (GPSR)
• Dark patterns: restarting countdowns, pre-ticked paid add-ons, fees added
  late
• Data flows: servers outside the EU, resources loaded without HTTPS, and
  trackers hidden behind the shop’s own subdomain (CNAME cloaking)

2. One-click fixes in wp-admin. Each one is off until you switch it on
or approve it:

• Images without alternative text: a list of media library images without
  alt text, with a suggestion from the product or file name. Only the rows
  you tick are saved.
• Load Google Fonts locally: copies the Google Fonts your theme enqueues to
  your own server once and serves them from there.
• Load videos and maps only after a click: YouTube, Vimeo and Google Maps
  embeds in your content show a button instead and load only when clicked.
• WooCommerce order button “Place order with obligation to pay”, in German “Zahlungspflichtig bestellen” (classic checkout).

3. Fixes as a task list. In the konformia.at account, the “Fixes” tab
lists every fix for the shop as a task, ordered by where the work is done:
in your consent tool, in WooCommerce, in the theme, at your domain provider.
Each task has the menu path, a copy button for what to enter (script
address, attribute, DNS record) and a “Fix in WordPress” link that opens the
matching switch on this plugin’s page in your own wp-admin. konformia.at
never changes your site remotely; you click there, logged in as yourself.
A task disappears as soon as the next check no longer finds the problem.

The plugin does not give legal advice and does not check or write legal
texts. Ownership of the shop is proven only through a randomly generated
secret that is served over a publicly readable route of this shop and
matched by konformia.at itself.

With an account at konformia.at you get the fix for every finding as a
task list, a check every week with an e-mail when something changes, a
dashboard and the report as PDF. The account starts as a free 14-day trial
(no card, ends by itself) from the report page.

Usage: under Tools -> Check shop, choose the markets the shop sells to
(EU and/or USA) and click “Check shop now”. The fixes are on the same
page under “Fix now”.

The plugin’s own screens are in German.

External services

This plugin connects to the external service konformia.at to check this
shop technically.

What is sent: this shop’s hostname, the chosen markets (EU and/or USA),
and a randomly generated secret that only proves this plugin is running on
this shop. No customer data, orders, or shop content is transmitted.

When: only when “Check shop now” is actively clicked in wp-admin, and
afterward while the result is being polled.

What for: konformia.at then opens the shop’s public pages like a visitor
would, measures what they load, and returns numbers plus a link to the
report.

The switch “Google Fonts lokal laden” downloads the font files your theme
already uses from fonts.googleapis.com and fonts.gstatic.com once, to store
them on your server. Nothing else is sent to Google.

Provider: konformia.at. Privacy policy:
https://konformia.at/datenschutz