Privacy Policy
Last updated 3 October 2026
This policy describes what ED Rule Tracker does with information, and it is short because the site genuinely does very little.
1. Information we collect
- Email address — only if you submit it through the subscribe or contact form. If you also answer the optional question about a paid tier, we store that answer alongside it.
- Payment information — handled entirely by Stripe, our payment processor. Card details are entered on Stripe's systems; they never reach this server, and we cannot see them. We receive only limited details such as your email address and subscription status.
- Server logs — like virtually every web server, ours records requests (IP address, time, path, user agent) for security and troubleshooting. These are ordinary access logs, are not used to build profiles, and are not sold.
2. What we do not do
- No cookies, and no cookie banner, because there is nothing to consent to.
- No analytics, tracking pixels, fingerprinting, or advertising identifiers.
- No selling, renting, or sharing of personal information for marketing.
- No behavioural profiling.
3. How we use it
- To send the alerts and updates you asked for.
- To operate your subscription and provide support.
- To keep the Service secure and working.
- To meet legal and tax obligations.
4. Third parties
- Stripe — payment processing and subscription management. Stripe's own privacy policy governs the data it collects directly.
- An email delivery provider — will be used to deliver alerts to subscribers, once email delivery is live.
- Cloudflare — the site is served through Cloudflare, which processes requests at the network edge.
We do not otherwise disclose personal information except where required by law.
5. Retention
Email addresses are kept for as long as you want to receive the updates, and are deleted on request or on unsubscribing. Payment records are kept as long as tax and accounting rules require.
6. Your rights
Depending on where you live you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to certain processing. Under California law you also have the right not to be discriminated against for exercising these rights, and under the GDPR you may lodge a complaint with your local supervisory authority.
To exercise any of these, use /contact. We will respond within the time the applicable law requires, and we do not charge for it.
7. Security
Data is transmitted over HTTPS. Access is restricted. However, no system is perfectly secure, and we cannot guarantee absolute security — so we keep as little as possible, which is the most reliable protection there is.
8. Children
The Service is intended for professional and educational use and is not directed at children under 13. We do not knowingly collect their information.
9. International visitors
The Service is operated from the United States, and information is processed there. If you access it from elsewhere, you understand your information may be transferred to and processed in the U.S.
10. Changes
If this policy changes materially, the date above changes and the change is noted on the site.