This is the privacy policy for runedb.io, operated by Rune Technologies (“Rune,” “we,” “us”). It explains what data we collect, why, and what rights you have over it.
We’ve kept this short and specific to what we actually do today. We’ll update it as the product evolves, and material changes will be noted here with a revised date.
What we collect
Email addresses. When you submit the early access form on our website, we collect your work email address. That’s it — no name, no company, no phone number, no payment information.
Server logs. Our hosting provider, Cloudflare, automatically records standard server logs (IP address, browser type, pages requested, timestamps). These are retained for 30 days for security and debugging purposes, then deleted.
Why we collect it
Email addresses are collected solely to contact you about Rune’s early access program. We will not add you to a marketing mailing list, sell your email, or share it with third parties. If we decide to send ongoing updates in the future, we will ask for your explicit consent first.
Server logs are used for security monitoring and debugging. They are not used for marketing or analytics.
Who has access
Your email address is accessible only to the Rune founding team. It is stored by Formspree, our form processing service. We do not share, sell, or rent your data to anyone.
Cloudflare processes server logs under their standard privacy policy.
Cookies
We do not use cookies for analytics or tracking. The only cookies on this site, if any, are strictly necessary ones set by Cloudflare for security purposes (such as bot management).
Your rights
Depending on where you are, you have rights over your data:
If you’re in the EU/EEA (GDPR): You have the right to access, correct, delete, or export your data. You can object to processing or request that we restrict it. Our legal basis for processing your email is legitimate interest (contacting potential early adopters who requested access). You can withdraw at any time by emailing us.
If you’re in California (CCPA): You have the right to know what data we collect, to delete it, and to opt out of its sale. We do not sell personal information.
Everyone: If you want us to delete your email, send us a message at the address below. We will confirm deletion within 5 business days.
Data retention
We retain your email address until one of the following: you ask us to delete it, we contact you and the conversation concludes, or 12 months pass without any communication — at which point we delete it. We do not keep email addresses indefinitely.
Security
Your data is stored in access-controlled systems. We use HTTPS for all data transmission. Access is limited to the founding team. We don’t store passwords, payment information, or sensitive personal data.
Children
This website is not directed at anyone under 16. We do not knowingly collect data from minors.
Changes to this policy
If we make material changes, we will update the “last updated” date at the top of this page. For significant changes that affect how your data is used, we will make reasonable efforts to notify you (e.g., via email if we have your address).
Contact
For any questions about this policy or your data: hello@runedb.io