Privacy and analytics

The short version

This site has no accounts, no sign-up forms, no newsletter, and sets no cookies of its own. The five questions on the front page, and the fuller browser assessment behind them, both run on your device and do not send your answers to us. Analytics is cookieless and event-level, with no personal identifiers attached. The one thing to know before using the share feature: a share link contains your encoded answers, so share it only with people you want to see them.

Who operates this site

Regula is an open-source project maintained by Kuziva Muzondo (see the About page). For any question or request about this page, write to support@getregula.com.

What this site collects directly

Nothing. There is no login, no form that submits data to us, and no payment or booking flow on this site at present. The five questions on the front page are marked up as a form so that a keyboard and a screen reader treat them as one group; that form has no destination, submits nothing, and its result is worked out in your browser. Email links on the site open your own mail application; nothing is submitted through the site itself.

Analytics

We use Plausible Analytics, loaded from plausible.io. It is a cookieless analytics service: it sets no cookies and does no cross-site tracking. We see aggregate counts of page views and of named events such as starting or completing the qualifier, assessment or scanner, copying an install command, opening a pricing question, or clicking a repository, package or email link. Events never include your answers, code, result, repository URL, search text, name, email address, organisation or a personal identifier. Before every analytics request, the site removes the whole query string from the reported page URL and disables Plausible's automatic form-submission event. If you arrive through one of our measured campaigns, we retain only a value from our finite source, medium and campaign allowlists for the browser session; arbitrary campaign text is discarded rather than sent. The versioned event contract is public in the repository. How Plausible handles the underlying requests is described in the Plausible data policy.

The browser assessment

The assessment runs entirely in your browser. Your answers are processed on your device and are not sent to us. Exporting a JSON result is a local download. If you use the share feature, your answers are encoded into the link itself: anyone who has the link can decode them, and any service that handles the link, including the server that hosts this site when the link is opened, can see the encoded string. When a shared link is opened, the page removes the encoded answers from the address bar before the analytics script loads, so they are not included in our analytics.

Hosting

This site is served by GitHub Pages. GitHub may collect visitor IP addresses in its logs when serving any GitHub Pages site, as described in GitHub's Pages documentation and the GitHub General Privacy Statement. We do not receive those logs.

The CLI and packages

The Regula command-line tool runs locally and does not upload scanned file contents. Optional crash reporting operates only with explicit opt-in consent, asks before sending anything, and can be suppressed outright with the REGULA_NO_TELEMETRY environment variable. The implementation is open source and can be read in the repository.

Email

If you email support@getregula.com, we use what you send only to answer you. You are not added to any list.

Your questions and rights

Depending on where you live, data-protection law may give you rights in relation to processing done by the services named above; their linked policies describe how to exercise them with those providers. For anything involving this site or project, contact support@getregula.com and we will respond.

Changes

Changes to this page are published here with an updated date. The page's history is public in the site's repository.