RuledPage← Back to Home

Privacy Policy

Last updated: February 18, 2026

1. Who We Are

RuledPage (“we,” “us,” or “our”) is a web-based page template builder operated from Marietta, Ohio, United States. Our website is located at https://ruledpage.vercel.app. For privacy-related inquiries, contact us at ruledpageapp@gmail.com.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: When you create an account (via payment or magic link), we collect your email address.
  • Payment Information: Payment processing is handled entirely by Stripe, Inc. We do not store your credit card number, CVV, or full billing details. We receive and store your Stripe customer ID and subscription ID for account management.
  • Template Data: If you use cloud save (paid feature), your template configurations are stored as JSON data in our database.
  • Reviews: If you submit a review, we collect the star rating, review text, optional answers to questions, and the display name you provide. Reviews are publicly displayed after approval.
  • Feature Requests: If you submit a feature request (paid users only), we collect the title, description, and category you provide.
  • Email Subscriptions: If you subscribe to product updates, we collect your email address.

2.2 Information Collected Automatically

  • Local Storage: For free (anonymous) users, template data and export counts are stored in your browser's local storage. This data never leaves your device unless you explicitly save to the cloud.
  • Cookies: We use essential cookies for authentication session management (Supabase Auth). We do not use advertising or third-party tracking cookies.
  • Custom First-Party Analytics: We built our own privacy-focused analytics system to understand how the service is used. We track page views, feature usage (like exporting a PDF), and general device/browser information. To do this without cookies, we generate a temporary, daily-rotating “session hash” based on your IP address and User Agent. This hash resets every day at midnight (UTC), making it impossible to track your activity across multiple days if you are not logged in. Your raw IP address is never stored in our database.
  • Server Logs: Our hosting provider (Netlify) may collect standard server logs including IP addresses, browser type, and request timestamps. We do not actively analyze or store these logs beyond what Netlify retains by default.

2.3 Information We Do NOT Collect

  • We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts.
  • We do not collect your physical address, phone number, or government-issued identification.
  • We do not collect data from children under 13 (see Section 8).

3. How We Use Your Information

  • To provide the service: Process payments, manage your account, store and retrieve your templates.
  • To communicate with you: Send transactional emails (account creation, password reset), and product update emails if you opted in.
  • To improve the service: Analyze feature usage, most exported patterns, feature requests, and reviews to prioritize development.
  • To comply with legal obligations: Respond to lawful requests from authorities.

We will never use your email address for unsolicited marketing beyond the product updates you explicitly subscribed to. You can unsubscribe at any time.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to anyone.

We share data only with the following service providers, strictly for operating the service:

We may also disclose information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Retention

  • Account data: Retained as long as your account is active. If you cancel your subscription, your profile is downgraded to free but not deleted.
  • Template data: Retained as long as your account exists. You can delete individual templates at any time via the cloud save dialog.
  • Reviews: Retained indefinitely unless you request removal.
  • Email subscriptions: Retained until you unsubscribe.
  • Account deletion: To delete your account and all associated data, email us at ruledpageapp@gmail.com. We will process deletion requests within 30 days.

6. Data Security

We implement reasonable security measures to protect your data:

  • All data transmitted between your browser and our servers is encrypted via HTTPS/TLS.
  • Database access is protected by Row Level Security (RLS) policies — users can only access their own data.
  • Payment data is handled entirely by Stripe, which is PCI DSS Level 1 certified.
  • Service role keys and API secrets are stored as encrypted environment variables, never in client-side code.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate personal data.
  • Deletion: Request deletion of your personal data.
  • Portability: Request your data in a machine-readable format.
  • Objection: Object to processing of your personal data for certain purposes.
  • Withdraw Consent: Withdraw consent for email communications at any time.

To exercise any of these rights, contact us at ruledpageapp@gmail.com. We will respond within 30 days.

8. Children's Privacy

RuledPage is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at ruledpageapp@gmail.com.

Educators and parents who use RuledPage to create materials for children should not submit children's personal information through the service. The templates and exported files created by RuledPage are generated locally or stored under the adult's account.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to Opt-Out of Sale: We do not sell your personal information. We have never sold personal information and have no plans to do so.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To exercise these rights, contact us at ruledpageapp@gmail.com. We will verify your identity before processing your request and respond within 45 days.

10. European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

  • Legal Basis for Processing: We process your personal data based on: (a) your consent (e.g., subscribing to product updates), (b) performance of a contract (providing the Service when you purchase a plan), or (c) our legitimate interests (improving the Service, preventing fraud).
  • Data Transfers: Your data is transferred to and processed in the United States. We rely on our service providers' compliance frameworks, including Standard Contractual Clauses adopted by the European Commission, for lawful international data transfers.
  • Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances.
  • Right to Object: You may object to processing of your personal data for direct marketing purposes at any time.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have violated your data protection rights.
  • Data Protection Contact: For GDPR-related inquiries, contact us at ruledpageapp@gmail.com.

We use only strictly necessary cookies for authentication session management. These cookies are exempt from consent requirements under GDPR and the ePrivacy Directive because the Service cannot function without them. We do not use advertising, analytics, or tracking cookies.

11. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users via email within 72 hours of becoming aware of the breach, as required by applicable law. We will also notify relevant authorities as required. The notification will describe the nature of the breach, the data affected, and the steps we are taking to address it.

12. Third-Party Links

Our website may contain links to third-party websites (e.g., Stripe checkout, Supabase authentication). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

13. International Users

RuledPage is operated from the United States. If you access the service from outside the United States, your data may be transferred to and processed in the United States. By using the service, you consent to this transfer. We rely on our service providers' compliance frameworks (Stripe, Supabase, Netlify) for international data transfer safeguards.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date. Your continued use of the service after changes constitutes acceptance of the updated policy.

15. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of Ohio, United States, without regard to its conflict of law provisions. Any disputes arising under or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts located in Washington County, Ohio (Marietta, OH).

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

RuledPage
Email: ruledpageapp@gmail.com