Privacy
Who is responsible
For the newsletter, the person responsible for personal data (responsable de traitement, in the sense of the GDPR) and its publisher is Thomas Rambaut. The same person is responsible for the messages sent to the contact addresses and for the request logs described in the next section. No postal address is published. The only contact is privacy@rulefiles.dev. For any question or request about your data, write to that address.
The website
The site sets no cookies and loads no analytics, advertising, font or script from another domain. The instruction file generator runs in your browser. What you type stays on your device and is never sent anywhere.
The company that hosts the site may log requests, including IP addresses, as any web host does. The host is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Its data processing addendum covers transfers from the European Economic Area to the United States with the Standard Contractual Clauses and the EU-U.S. Data Privacy Framework, and its privacy policy applies to those logs. This site adds no tracking on top of them.
The newsletter
This section describes what applies when you subscribe.
- What we collect. The email address you type. Our provider also records the IP address and referrer-level details of your signup.
- Why. To send you the weekly digest of changes in AI coding tools. We do not use the address for anything else, we do not sell it and we do not share it, other than with the provider below and the sub-processors it lists.
- Legal basis. Your consent (GDPR, article 6(1)(a)). You give it by submitting the form and confirming through the link in the first email, which is a double opt-in. You get nothing before you confirm.
- Withdrawing. Every email carries an unsubscribe link. You can also write to privacy@rulefiles.dev. Withdrawing does not affect what was done before.
- Provider. Buttondown, LLC, in the United States, sends the emails and stores the list on our behalf. Its data processing agreement uses the European Commission's Standard Contractual Clauses for transfers from the European Economic Area, and its sub-processors are listed on its site. The signup and confirmation pages are hosted by Buttondown, and its own policies apply to them.
- Opens and clicks. We do not track them. Our emails carry no tracking pixel, and the links to other pages are not rewritten.
- How long. We keep your address for as long as you stay subscribed. When you unsubscribe, or earlier if you ask us, we delete your data within 30 days, unless the law requires us to keep it. If you sign up and never confirm, we delete the address within 40 days. Deleting means removing the record from the provider's database, not only hiding it. Copies in the provider's backups expire on its own schedule, which its documentation gives as up to two days.
Messages you send us
If you write to contact@rulefiles.dev, privacy@rulefiles.dev or sponsors@rulefiles.dev, your message reaches Thomas Rambaut through Cloudflare Email Routing and a private mailbox. We use it only to answer you, on the basis of our legitimate interest in answering (GDPR, article 6(1)(f)), and we keep it for 12 months after the exchange ends, then we delete it.
Your rights
You can ask for access to your data, for its correction or erasure, for a limit on its use, for a copy you can take elsewhere, and you can object to its use. You can withdraw your consent at any time. Write to privacy@rulefiles.dev. We answer within one month.
If you think your rights are not respected, you can complain to the CNIL, the French data protection authority (complaint form), or to the authority of your own country in the European Union.
Last updated: