What this site collects, and your choices.

Effective September 27, 2026. This policy covers rupturelabs.io, operated by Rupture Labs LLC, San Francisco, California. It doesn't cover the work we do for clients, which is governed by each client's agreement.

What we collect

What you send us. When you use a form on this site (contact, the free compliance intelligence report, or registering interest), we receive what you enter: usually your email address, your company and your message, with the time you sent it.
Analytics, with your choice. We use one analytics tool, Pierview, to see which pages are read. It stores a visitor ID and a session ID in your browser and reads your browser type. It doesn't run if your browser sends Global Privacy Control, and visitors in the EU, EEA, UK and Switzerland are asked first and it runs only if they accept.
A setting you choose. If you switch between the light and dark theme, your browser remembers it. It stays on your device.
Your privacy choice. Your browser remembers whether you accepted or declined analytics, so we don't ask on every page.
Network data. Our hosting provider, Cloudflare, processes your IP address to deliver the site and protect it from abuse. Our forms keep your IP address for about two minutes to limit repeated submissions.

We don't use advertising cookies or tracking pixels, and our fonts are served from our own domain.

Why we use it

To reply to you and arrange what you asked for, such as a call or a report.
To understand which pages are useful, when analytics is on.
To keep the site running and secure.

We don't sell your personal information, and we don't share it for cross-context behavioral advertising.

For visitors in the EU, EEA, UK and Switzerland, our legal bases are your consent for analytics, and our legitimate interest in answering your inquiry and keeping the site secure.

Who processes it for us

Cloudflare: hosting, security, and storage of form submissions.
MailChannels: delivers a copy of each form submission to our inbox.
Pierview: website analytics, when analytics is on.
Google: our email, and the calendar you use if you book a call through Google Calendar, under Google's own privacy policy.

These providers may process data in the United States and other countries. Where the law requires it, we rely on the safeguards they offer for international transfers.

How long we keep it

We keep what you send us for as long as we need it to respond and to manage any relationship that follows, and we delete it when you ask unless the law requires us to keep it. Analytics data is kept under our analytics provider's retention settings.

Your choices and rights

Change your analytics choice at any time: open privacy choices.
Global Privacy Control is honoured: if your browser sends it, analytics doesn't run.
Ask us to see, correct or delete the personal information we hold about you, or to stop using it.
California residents have the rights California law provides, and we won't treat you differently for using them.
EU, EEA, UK and Swiss residents can also object, ask for a copy in a portable form, withdraw consent, and complain to their data protection authority.

To make a request, email [email protected]. We'll reply within the time the law sets.

Children and changes

This site isn't directed to children under 13, and we don't knowingly collect their information.

If we change this policy, we'll update it here and change the effective date at the top.