FlatPress support forum

Hello FlatPress Team and Community,

We are excited to announce that we have developed a new plugin: All in One Accessibility for the FlatPress platform.

Learn more about our solution:

https://www.skynettechnologies.com/all- ... essibility

GitHub Repository:
https://github.com/skynettechnologies/f ... essibility

About the Plugin:

The All in One Accessibility plugin empowers FlatPress-based websites to quickly implement key accessibility features and improve compliance with standards like WCAG 2.1, ADA, Section 508, and more.

Key Features:
Keyboard navigation
Screen reader adjustments
Dyslexia-friendly fonts
Text-to-speech
Contrast and color adjustments
Real-time accessibility score preview
And over 70+ other accessibility features!

This plugin is easy to install and configure, helping site owners ensure inclusivity and legal compliance for users with disabilities.

We would love to have this plugin listed on the FlatPress plugin listing page to help more developers and server owners enhance accessibility on their sites.

Please let us know the next steps or if there’s any additional info required from our side.

Looking forward to your feedback!


Best regards,
Rajesh Bhimani
Skynet Technologies USA LLC

Hello Rajesh,

thank you very much for providing the plugin. I will take a closer look at the source code when I get the chance and submit a pull request if necessary.

On a quick skim, I noticed that some data is loaded from external sources, possibly also sent.

FlatPress/the development team endeavors to be as privacy-friendly as possible and to provide necessary resources only via the BLOG_BASEURL.

We should therefore look together at how we can optimize the plugin.

With best regards
Frank

Hello everyone,

Here are a few points why the plugin in version 1.0.0 should not be used in the European Union in my opinion.

1. inadmissible data transfer to a non-EU country
The plugin automatically sends personal data (including e-mail address, name of the operator, IP address of the site visitors) to servers in the USA - a third country without a valid adequacy decision by the EU Commission.

2. lack of standard contractual clauses (SCC) or other guarantees
There is no evidence that Skynet Technologies uses binding EU standard contractual clauses or binding corporate rules to ensure an adequate level of data protection.

3. no order processing contract (AV contract) automatically concluded
According to DSGVO Art. 28, website operators and providers must conclude a written AV contract. The plugin does not take care of this and does not provide a template or instructions.

4. lack of consent mechanisms
The accessibility widget is loaded without the user's prior consent. As a result, IP addresses and configuration data are transferred in advance without the explicit consent of visitors (e.g. via consent banner).

5. incomplete privacy policy
The plugin does not provide any information or sample texts for a GDPR-compliant privacy policy in which the purpose, recipient and legal basis of the data transfer are disclosed.

6. no transparency regarding technical and organizational measures
There is no documentation of which security measures (encryption, access control, deletion periods) Skynet Technologies has implemented for the processed data.

7. lack of data minimization
More data is transferred than would be necessary to simply load the widget (e.g. name and email of the operator, all configuration parameters), without the option of sending only minimal data.

8. no role and rights management
The plugin does not distinguish between different user roles or the mandatory restriction of data access in the sense of the “need to know” principle.

9. no support for data subject rights
There are no functions to automatically implement data export, deletion or correction (Art. 15-17 DSGVO) in response to requests from data subjects.

10. potential obligation to carry out a data protection impact assessment (DPIA)
Since extensive automated collection and transfer of personal data to third parties takes place, a DPIA could be required in accordance with Art. 35 DSGVO - the plugin does not offer any support for this.

Do I understand it correctly that the plugin is basically a bridge to the services of Skynet?

All the best,
Arvid

Arvid wrote: Mon Aug 04, 2025 11:47 am Do I understand it correctly that the plugin is basically a bridge to the services of Skynet?

Sooner or later, you'll run into a paywall.