I hate to be a pedant, and I really appreciate what these guys are doing - it will be really useful. But their site doesn't have a privacy policy and they have an email subscription box.

I see this a LOT in the world of GDPR compliance: people who say "We're building something/providing training on GDPR compliance. Sign up here. Send us your email address. Give us your personal data!"...

...but they have not obeyed even the simplest of data protection rules, and not a bit of GDPR guidance.

If people want trust in their ability to inform us about GDPR, then they need to show that they are, themselves, not only knowledgable about it, but also implementing some of it.

I strongly suggest that these guys tell us, when they collect email addresses:

- who they are, why they collect the data, for how long and who receives it
- how users can access their data and take it with them
- how users can delete their data