RULIMO
Privacy
Information still to be completed: operator identity and address, legal bases, retention and access conditions for minors. These pages do not establish full legal compliance.
Data we use
Depending on your use: access email, language, account and session identifiers, aliases, rules, proposals, votes, plan membership and contact messages. Technical logs and internal usage events are also generated.
Purposes
To provide access, store and share contributions, manage plans, answer enquiries and protect the service. Documentation of legal bases and measurement is still incomplete.
Shared links
Anyone with a shared link can open and forward it. It is not confidential. Revocation does not erase external copies or screenshots. Do not publish other people’s personal data without a lawful basis.
Providers
Cloudflare provides hosting and database services; Resend provides transactional email. Contact messages are stored in Rulimo. The operator receives an email alert without the message content or the user’s contact address. Provider identification and international transfer safeguards remain to be documented.
Sessions and retention
The rulimo_session cookie recognises your session for up to 30 days. Access links expire after 15 minutes. A daily cleanup deletes access-link records expired for over 24 hours, provided the request and its last use are also over 24 hours old. Session expiry does not delete linked records. Full retention, backup and erasure policies remain incomplete. Deleting an account does not instantly erase every record.
Your rights
You may request access, rectification, erasure, objection, restriction and portability where applicable, and withdraw consent where it is the legal basis. Use Contact to send a request to the operator; do not send identity documents initially. The general response period is one month, subject to lawful extensions. You may complain to the Spanish AEPD or the competent authority.
Children
Applicable ages depend on jurisdiction and processing. A specific access and parental authorisation procedure has not yet been defined and implemented.