Privacy
Who is responsible
For the newsletter, the person responsible for personal data (responsable de traitement, in the sense of the GDPR) and its publisher is Thomas Rambaut. The same person is responsible for the messages sent to the contact addresses and for the request logs and the visit statistics described in the next section. No postal address is published. The only contact is privacy@rulefiles.dev. For any question or request about your data, write to that address.
The website
The site sets no cookies and loads no advertising or font from another domain. The only script from another domain is Cloudflare Web Analytics, described below. The instruction file generator runs in your browser. What you type stays on your device and is never sent anywhere.
The company that hosts the site may log requests, including IP addresses, as any web host does. The host is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Its data processing addendum covers transfers from the European Economic Area to the United States with the Standard Contractual Clauses and the EU-U.S. Data Privacy Framework, and its privacy policy applies to those logs. Apart from Cloudflare Web Analytics, described below, this site adds nothing on top of them.
To count visits, Cloudflare adds its Web Analytics script, loaded from static.cloudflareinsights.com, to each page as it is served. The script measures how the page loads (load time and Core Web Vitals) and sends these measurements, with the page address and the address of the page you came from, to this site's /cdn-cgi/rum address, which Cloudflare runs. Like any request to the site, this one reaches Cloudflare with your IP address and your browser's user agent.
According to Cloudflare, Web Analytics does not log query strings, uses no cookies or local storage to collect usage metrics, does not fingerprint visitors by IP address, user agent or other data to display analytics, does not track individual users across its customers' sites, and does not collect or use visitors' personal data (product page, documentation, FAQ). Cloudflare keeps the raw measurements for 7 days, then an aggregated sample of about 10% for long-term storage; its documentation gives no period for that.
We see totals only: page views, visits, load times, and counts by country, page, referring site, browser, operating system and device type, for the previous six months. We use them to know how many people read the site and which pages they read, and, once sponsorship opens, to give sponsors audience figures. Cloudflare processes this data for us under the data processing addendum linked above, which also covers transfers to the United States. We rely on our legitimate interest in measuring how the site is read (GDPR, article 6(1)(f)). You can object by writing to privacy@rulefiles.dev.
The newsletter
This section describes what applies when you subscribe.
- What we collect. The email address you type. Our provider also records the IP address and referrer-level details of your signup.
- Why. To send you the weekly digest of changes in AI coding tools. We do not use the address for anything else, we do not sell it and we do not share it, other than with the provider below and the sub-processors it lists.
- Legal basis. Your consent (GDPR, article 6(1)(a)). You give it by submitting the form and confirming through the link in the first email, which is a double opt-in. You get nothing before you confirm.
- Withdrawing. Every email carries an unsubscribe link. You can also write to privacy@rulefiles.dev. Withdrawing does not affect what was done before.
- Provider. Buttondown, LLC, in the United States, sends the emails and stores the list on our behalf. Its data processing agreement uses the European Commission's Standard Contractual Clauses for transfers from the European Economic Area, and its sub-processors are listed on its site. The signup and confirmation pages are hosted by Buttondown, and its own policies apply to them.
- Opens and clicks. We do not track them. Our emails carry no tracking pixel, and the links to other pages are not rewritten.
- How long. We keep your address for as long as you stay subscribed. When you unsubscribe, or earlier if you ask us, we delete your data within 30 days, unless the law requires us to keep it. If you sign up and never confirm, we delete the address within 40 days. Deleting means removing the record from the provider's database, not only hiding it. Copies in the provider's backups expire on its own schedule, which its documentation gives as up to two days.
Messages you send us
If you write to contact@rulefiles.dev, privacy@rulefiles.dev or sponsors@rulefiles.dev, your message reaches Thomas Rambaut through Cloudflare Email Routing and a private mailbox. We use it only to answer you, on the basis of our legitimate interest in answering (GDPR, article 6(1)(f)), and we keep it for 12 months after the exchange ends, then we delete it.
Your rights
You can ask for access to your data, for its correction or erasure, for a limit on its use, for a copy you can take elsewhere, and you can object to its use. You can withdraw your consent at any time. Write to privacy@rulefiles.dev. We answer within one month.
If you think your rights are not respected, you can complain to the CNIL, the French data protection authority (complaint form), or to the authority of your own country in the European Union.
Last updated: