Provide the platform
Create the account, authenticate, save progress and issue certificates.
Performance of the requested servicePrivacy policy
Last updated: 25 August 2026
Plain-language summary
Rulside only processes the data needed to create your account, save your learning, protect the service and, when you agree, understand where visits come from. It does not sell data or use behavioural advertising.
1. Controller and contact
Controller: Rulside.
Privacy contact: rulside@proton.me.
2. Data we process
- Account: alias, email address, optional profile photo and a securely hashed password. The photo is only displayed inside the account.
- Learning: level, answers, progress, XP, streak, notes, evidence and certificates.
- Trial without an account: anonymous technical identifier, start or completion, level, score and later conversion to an account.
- Required technical data: IP address converted into a keyed pseudonymous hash (not retained as readable text), date and time, requested path, session, general device type and approximate country, region or city when supplied by the hosting provider. Rulside does not request GPS location.
- Optional analytics: pages and routes visited, opened worlds and lessons, selected level, language, screen dimensions, device category and aggregated interactions, only after consent.
3. Purposes and legal bases
Security and operation
Prevent abuse, protect accounts, diagnose errors and obtain basic technical metrics.
Legitimate interest in maintaining a secure serviceAcquisition analytics
Understand which channel brought a visit in order to assess Rulside’s reach.
Consent, which can be withdrawn at any time4. Retention
- Account and progress data are retained while the account remains active.
- Technical logs, approximate location and account-free trial events are deleted after no more than 30 days.
- Your cookie preference is remembered for 6 months.
- Data required to address legal liabilities may be restricted for the applicable statutory periods.
5. Recipients and transfers
Data are hosted by Rulside’s infrastructure provider and are not sold to third parties. Rulside does not embed advertising or third-party analytics and serves fonts from its own domain. Data will only be disclosed where legally required.
6. Your rights
You may request access, rectification, erasure, objection, restriction and portability, and withdraw consent, by writing to rulside@proton.me. You can also delete your account and progress directly from Profile. State which right you wish to exercise and the affected account. You may lodge a complaint with the Spanish Data Protection Agency.
7. Children
If applicable law requires permission from a parent or guardian to create an account, the child must use Rulside with that permission.
8. Security and changes
Rulside applies access controls, hashed passwords, CSRF protection, secure session cookies and restricted access to statistics. This policy may be updated when features or legal obligations change; the review date will appear at the top.
9. Cookies
Read the Cookie policy and change your choice using “Cookie settings”.