Privacy Policy
Last updated: April 27, 2026
RuleForge (ruleforge.online) is a service operated by Nicolas Guy (sole proprietorship — Entreprise individuelle, France). This policy describes how we collect, use, and protect your personal data, in compliance with the General Data Protection Regulation (GDPR).
1. Data Controller
Nicolas Guy — Sole proprietorship (Entreprise individuelle)
17 rue des Arbousiers, 34430 Saint-Jean-de-Védas, France
SIRET: 941 696 296 00032
Email: nicolas.alexis.guy@gmail.com
2. Data Collected
2.1 Data Provided by the User
- Registration: email address, password (hashed), full name
- Profile: username, biography, profile picture, social links (optional)
- Content: game rules created, comments, reports
- Payment: payment data is processed directly by Stripe and is never stored on our servers
2.2 Data Collected Automatically
- Navigation data: IP address, browser type, pages visited
- Usage data: rule views, reading history, interactions (likes, favorites, follows)
- Cookies: authentication cookies (Supabase), preferences (theme, language)
3. Purpose of Processing
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Performance of contract |
| Publishing and managing rules | Performance of contract |
| Social features (likes, comments, follows) | Legitimate interest |
| Subscription and payment management | Performance of contract |
| AI consistency checking of rules | Consent (user action) |
| Statistics and analytics | Legitimate interest |
| Content moderation | Legitimate interest |
| Advertising (Google AdSense) | Consent |
4. Sub-processors and Data Transfers
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | EU / Singapore |
| Vercel | Website hosting | United States |
| Stripe | Payments and subscriptions | United States |
| Anthropic | AI analysis of rules (Claude) | United States |
| Google AdSense | Advertising | United States |
Transfers to the United States are governed by Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework where applicable.
5. Use of Artificial Intelligence
RuleForge offers an AI-powered consistency checker (Claude, by Anthropic). When you use this feature:
- The text content of your rule is sent to Anthropic's API for analysis
- Data is not used by Anthropic to train its models (API policy)
- Analysis results are not stored on our servers
- This feature is optional and only triggered by user action
6. Data Retention
- Account data: retained while the account is active, deleted within 30 days of account deletion
- Published content: retained while the account is active
- Payment data: retained by Stripe according to their retention policy
- Reading history: limited to the last 10 entries per user
- Navigation logs: 90 days maximum
7. Your Rights
Under the GDPR, you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate data
- Right to erasure: request deletion of your data
- Right to portability: receive your data in a structured format
- Right to object: object to the processing of your data
- Right to restriction: restrict the processing of your data
To exercise these rights, contact us at: nicolas.alexis.guy@gmail.com
You also have the right to lodge a complaint with the French data protection authority (CNIL): www.cnil.fr
8. Security
We implement appropriate technical and organizational measures to protect your data: encryption in transit (HTTPS/TLS), secure authentication, Row Level Security (RLS) on the database, hashed passwords.
9. Changes
This policy may be updated. In case of substantial changes, we will notify you through the site. The last update date is indicated at the top of this page.
10. Contact
For any questions about this policy: nicolas.alexis.guy@gmail.com