Privacy

Last updated: 2026-07-05

The short version

rego.run has no accounts, no cookies, no analytics, and no tracking. Your policies, data documents, and inputs are processed entirely in your browser and are never transmitted to us, and there is no backend that could receive them.

What stays on your device

• Your workspace (policy files, data, input, open tabs, and UI preferences such as the theme) is stored in your browser's localStorage, solely so your work survives a page reload. This storage is strictly necessary for the functionality you request and is never read by, or sent to, any server. Clearing your browser's site data removes it completely.
• Policy evaluation runs in a WebAssembly build of Regorus inside your browser. Nothing you write leaves your machine.

Share links

The Share feature encodes your entire workspace into the URL fragment (the part after #). Browsers do not send URL fragments to web servers, so rego.run never sees shared content but anyone you give the link to can read everything in it, and services where you paste the link (chat, email, issue trackers) may store it.

Hosting

The site's static files are delivered by Cloudflare. Like any web host, Cloudflare processes technical request metadata (such as your IP address and user-agent) transiently to deliver content and protect against abuse. We do not use this data to identify or profile visitors.

Contact

rego.run is open source. Questions or concerns: github.com/CD57/rego-run.