Cookie & Tracking Policy

This policy explains the cookies and similar technologies used on the RULED website and in the app, what each one is for, and which of them need your consent.

Last updated · 2 September 2026

Draft — pending legal review

This document is a working draft prepared for review by a qualified lawyer. It is not legal advice and it is not in force. Every value in square brackets still has to be filled in, and the whole text has to be checked against the jurisdictions RULED will actually operate in.

1. What this covers

“Cookies and similar technologies” means more than cookies: it includes local storage, software development kits, tracking pixels, web beacons, device fingerprinting and any comparable technique that stores information on your device or reads information from it.

The Italian supervisory authority treats all of these as tracking technologies, so this policy covers them together rather than only the ones literally called cookies.

2. What this website uses today

The RULED website currently uses no analytics, no advertising technologies and no third-party tracking of any kind. Concretely, as of the date at the top of this page:

  • no analytics service is installed, of any provider
  • no advertising or conversion pixels are present
  • no social network embeds or share widgets are loaded
  • fonts are served from our own servers, so displaying this page makes no request to any external font provider
  • the site loads no scripts, images or other resources from third-party domains
  • nothing is written to your browser's local storage

Because nothing beyond what is strictly necessary is used, no consent banner is shown. If that changes, this policy is updated first and the banner described in section 4 appears before any non-essential technology is loaded.

3. Strictly necessary technologies

These are required to deliver a service you asked for, and no consent is needed for them. When you use the app rather than the marketing site, they include a session cookie that keeps you signed in and a security token that protects the session against forged requests.

Our hosting and content-delivery provider may also set strictly necessary cookies for load balancing, routing and abuse protection. [Before launch: name the provider and list those cookies with their purpose and duration, and confirm that the provider's own analytics features are switched off.]

4. If we add analytics or advertising technologies

We have not made this decision yet, and this section describes what we commit to when we do.

Analytics. Analytics may be treated as equivalent to technical technologies — and therefore used without consent — only where they meet the conditions established by the applicable supervisory authority. In Italy this means in particular that the data serves to produce aggregate statistics and that, where a third-party provider is involved, appropriate minimisation measures are applied and the provider does not combine that data with its own for its own purposes. Anything short of these conditions requires prior consent. We will state which of the two applies, and name the provider here, before switching anything on.

Advertising and conversion technologies. Pixels and trackers provided by advertising or social platforms require your prior, specific and freely given consent. They will be listed here individually — provider, purpose, data collected, retention, country of processing and a link to their own policy — and they will not be loaded at all unless you accept them.

The banner. When any non-essential technology exists, you will be shown a banner offering Accept all, Reject all and Customise, with refusing exactly as easy as accepting and no penalty for refusing. From that moment a permanent Cookie settings control appears in the site footer so you can change or withdraw your choice at any time, as easily as you gave it.

You can also delete or block cookies through your browser settings, though doing so may break parts of the app that rely on strictly necessary cookies.

5. The mobile application

The RULED mobile application contains no advertising trackers and no advertising or attribution software development kits. It stores technical data on your device to keep you signed in and to apply the rules and locks you configured. Crash and diagnostic reporting is described in the Privacy Policy.

The tokens representing the applications you chose to lock are stored on your device only and are never transmitted to us.

This statement is a commitment, not a snapshot: if an advertising, attribution or analytics SDK is ever added to the app, this policy is updated and consent is collected before that SDK is activated.

6. Changes and contact

Any change to the technologies described here is reflected on this page, with the date at the top updated, before the change takes effect.

For any question, write to [privacy@ruled.app]. How we handle personal data more generally is described in our Privacy Policy.

[Legal entity name] · [Registered address] · VAT [VAT number] · [contact@ruled.app]