Privacy policy
Last updated 22 September 2026
This policy describes what Find The Rules actually does with data. It was written against the running code rather than from a template, so it should match reality. If you find a discrepancy, that is a bug — please report it.
The short version
- There are no visitor accounts. You cannot log in, so we hold no profile of you.
- We do not ask for your name or email address anywhere on the site.
- We count page views in aggregate, not per person.
- Google serves the advertising and sets its own cookies. That is the main third party involved.
What we collect
Rule submissions
If you submit a game or a correction, we store the text you wrote, the game it relates to, and the time you sent it. The form does not ask for your name or contact details, and we do not attach an identity to what you send. Submissions are reviewed by an editor before anything is published.
Page views
We increment a counter per game, per day, so we know which rules people need most. The counter is a number. It is not linked to you, to a session, or to an identifier of any kind.
IP addresses
Your IP address is used transiently to apply rate limits — to stop one source flooding the submission form or the view counter. It is held in server memory for the length of the rate-limit window and is not written to our database. Our hosting provider keeps its own request logs; see below.
Partnership enquiries
The publisher enquiry form opens your own email client with a pre-filled message. Nothing is submitted to us until you press send in your email application, and the resulting email lands in an ordinary mailbox.
Storage on your device
| What | Type | Purpose | Lifetime |
|---|---|---|---|
ftr-theme | Local storage | Remembers light or dark mode | Until you clear it |
ftr-viewed-* | Session storage | Stops one visit counting twice | Until you close the tab |
ftr_admin | Cookie | Editor sign-in. Only ever set for the site operator | 8 hours |
| Google advertising cookies | Cookie | Ad selection and measurement | Set by Google |
The first three are strictly functional and set no advertising or tracking identifiers.
Advertising
This site is funded by advertising served by Google AdSense. Google and its partners use cookies and similar technologies to select and measure ads, and may use your prior visits to this and other sites to do so.
You can control this directly with Google at Google Ads Settings, and opt out of third-party vendor cookies at aboutads.info. Google’s own handling of data is described in its partner sites policy.
Who else processes data
| Provider | Role | What they see |
|---|---|---|
| Vercel | Hosting | Request logs, including IP addresses |
| Supabase | Database | Game content, submissions, view counts |
| Advertising | Ad impressions and its own cookies |
What we never do
- Sell or rent data to anyone.
- Build advertising profiles ourselves.
- Ask for payment details — there is nothing to buy.
- Email you, because we never collect an address.
Australian privacy law
Find The Rules is operated from New South Wales, Australia. The relevant law is the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles made under it. NSW state privacy legislation (the PPIP Act) applies to government agencies, not to this site.
The Privacy Act currently exempts most businesses with an annual turnover of AU$3 million or less. While that exemption applies, we choose to follow the Australian Privacy Principles anyway, because the alternative is holding your data to a lower standard than we would want for our own.
Two caveats worth stating plainly. The exemption has exceptions — including for businesses that disclose personal information for a benefit — and whether ad-funded publishing engages one is genuinely arguable. Separately, the Commonwealth has signalled an intention to remove the small business exemption in a future tranche of privacy reform. We are building as though the Act applies.
Your rights
Under the Australian Privacy Principles you may ask us for access to any personal information we hold about you, and ask us to correct it. Visitors in the EU, the UK or California have additional rights, including erasure and objection to processing.
In practice we deliberately collect no identifiers, so we usually hold nothing that can be linked to you — which also means we may be unable to locate anything in response to a request without more information from you.
If you submitted a rule and want it removed, tell us roughly what you sent and when, and we will delete it.
Complaints
Complain to us first at privacy@findtherules.com and we will respond within 30 days. If you are not satisfied, you can escalate to the Office of the Australian Information Commissioner.
Visitors outside Australia
Our hosting, database and advertising providers operate globally, so data may be processed outside Australia — including in the United States and the European Union. Google’s advertising means that visitors from the EEA and the UK are shown a consent notice before personalised advertising is served, as required by Google’s publisher policies and the GDPR.
Children
The site is general-audience and not directed at children. We do not knowingly collect data from anyone under 13.
Changes
If this policy changes materially, the date at the top will change with it.
Contact
Privacy questions and deletion requests: privacy@findtherules.com. More ways to reach us are on the about page.
This policy describes the site accurately, but it is not legal advice. Have an Australian solicitor review it before launch — particularly on whether the small business exemption applies once partnership revenue starts, and on your obligations to EEA and UK visitors.