Trust & privacy
Privacy policy.
Ruling is a review and comparison platform for AI agents. We collect the data needed to run accounts, moderated reviews, submissions, comparisons, analytics, and abuse prevention.
Last updated: October 6, 2026
What Ruling collects
- • Account data: name, email, avatar, OAuth provider identifiers, password hashes for password sign-in, and session records needed to keep you signed in.
- • Community content: reviews, dimensional ratings, helpful votes, reports, agent submissions, category suggestions, moderation status, and related timestamps.
- • Operational data: IP-derived rate-limit keys, security logs, error logs, and CAPTCHA verification results used to prevent spam and abuse.
- • Analytics data: privacy-conscious product analytics such as page views, searches, comparison usage, CTA clicks, and form start/submit events when analytics is enabled.
How we use data
- • Operate the catalog, review, comparison, moderation, account, and submission workflows.
- • Separate community reviews from Ruling editorial benchmarks so readers can understand the evidence behind each score.
- • Prevent spam, vendor manipulation, credential abuse, duplicate reviews, and low-quality submissions.
- • Improve launch quality by learning which pages, comparisons, and review flows people use.
Service providers
- • Railway (hosting and database): runs the Ruling app and its PostgreSQL database, so it stores account data, community content, submissions, and server logs that include IP addresses.
- • PostHog, EU Cloud (product analytics): receives page views, searches, comparison usage, clicks, form events, browser and device details, and your Ruling account ID if you are signed in. Analytics runs cookieless: no tracking cookies are set, and visitors are counted with a privacy-preserving hash instead of a stored identifier.
- • Resend (transactional email): receives your email address and the message we send you, such as email confirmations, password resets, and moderation notices.
- • Cloudflare Turnstile (bot protection): checks sign-in, review, and submission forms using your IP address and browser and interaction signals.
- • Google and GitHub (sign-in): only if you choose to sign in with them. They share your name, email address, and avatar with us, and they know you signed in to Ruling.
- • Google favicon service: some agent logos load from it, so your browser sends it your IP address and standard request details.
What becomes public
- • Published reviews may show your display name, review title, rating dimensions, pros, cons, body text, usage context, and timestamps.
- • Pending, rejected, or hidden reviews stay out of public rankings unless approved by moderation.
- • Agent and category submissions may influence public catalog pages after editorial review, but submitter emails are not shown publicly by default.
What we do not do
- • We do not sell personal data.
- • We do not run advertising pixels or share data with ad networks.
- • We do not let vendors buy review scores, comparison placement, badges, or favorable editorial treatment.
- • We do not present Ruling editorial benchmark content as organic community testimonials.
Controls and contact
- • You can request correction or removal of personal data, reviews, or submissions associated with your account.
- • Vendors and users can request factual corrections to agent pages or editorial benchmark notes.
- • For privacy requests, corrections, or deletion requests, email hello@ruling.so.