Privacy Policy

Effective date: 2026-08-21

Privacy and security are foundational to Ramble Tracks, not afterthoughts. We collect the minimum data required to operate the service. We do not sell, rent, or monetize your personal information in any form.

Who we are

Ramble Tracks is operated as a personal project. Questions about this policy can be sent to andyclaw@gmail.com.

What we collect and why

• Email address — collected when you create an account, used only to verify your identity and send essential service notices (password reset, email verification). Never used for marketing without explicit opt-in.
• Content you author — learning modules and associated text you create are stored so you can retrieve and publish them. You own your content.
• Basic usage logs — AWS infrastructure automatically records request logs (IP address, timestamp, HTTP status code) for security and operational monitoring. Logs are retained for a short period and are not used to build profiles.

What we do not collect

We do not use tracking pixels, third-party analytics, advertising SDKs, or fingerprinting. We do not track you across other websites. We do not read or analyze the content of your modules for advertising purposes.

Learners (no account required)

Accessing a module by ID requires no account and no personal information. The only data processed is what is necessary to serve the requested module — no profile is created and no identifying information is stored.

Infrastructure and data storage

All data is stored and processed on Amazon Web Services (AWS) in the us-east-2 (Ohio) region. Services used include:

• Amazon Cognito — authentication and identity management
• Amazon DynamoDB — encrypted-at-rest database for content and account data
• AWS Lambda — serverless compute; no persistent server retains your data in memory
• Amazon API Gateway — HTTPS-only API endpoints
• AWS Amplify — hosting and deployment

All data is encrypted in transit (TLS) and at rest. AWS's security and compliance documentation is available at aws.amazon.com/compliance.

Payments

Payment processing is handled by a third-party payment provider (Stripe). We do not store credit card numbers or full payment details. The payment provider's privacy policy governs data collected during checkout.

Data sharing

We do not sell or share your personal data with third parties, except:

• AWS, as the infrastructure provider described above
• Stripe, solely to process payments
• When required by law or to protect the rights and safety of users

Data retention and deletion

You may request deletion of your account and all associated data at any time by contacting us. Deletion is permanent and completed within 30 days. Published modules are removed from public access immediately upon account deletion.

Your rights

You may request a copy of the personal data we hold about you, correct inaccurate information, or request deletion. Contact us at andyclaw@gmail.com.

Changes to this policy

If this policy changes materially, registered users will be notified by email before the change takes effect. The effective date at the top of this page will be updated.