diff --git a/MODULE.bazel b/MODULE.bazel
index 2564e2b..c2a0293 100644
--- a/MODULE.bazel
+++ b/MODULE.bazel
@@ -13,12 +13,16 @@ bazel_dep(name = "bazel_skylib", version = "1.5.0")
 bazel_dep(name = "platforms", version = "0.0.8")
 bazel_dep(name = "rules_oci", version = "1.7.4")
 bazel_dep(name = "rules_python", version = "0.29.0")
+bazel_dep(name = "aspect_tools_telemetry", version = "0.2.8")
 
 # Development dependencies which are not exposed to users
 bazel_dep(name = "aspect_rules_py", version = "0.7.3", dev_dependency = True)
 bazel_dep(name = "buildifier_prebuilt", version = "6.4.0", dev_dependency = True)
 bazel_dep(name = "container_structure_test", version = "1.16.0", dev_dependency = True)
 
+tel = use_extension("@aspect_tools_telemetry//:extension.bzl", "telemetry")
+use_repo(tel, "aspect_tools_telemetry_report")
+
 bazel_lib_toolchains = use_extension("@aspect_bazel_lib//lib:extensions.bzl", "toolchains")
 bazel_lib_toolchains.jq()
 bazel_lib_toolchains.coreutils()
diff --git a/README.md b/README.md
index af52281..32dee1d 100644
--- a/README.md
+++ b/README.md
@@ -25,3 +25,7 @@ For example to use commit `abc123`:
 
 Aspect plans to open-source our internal AWS support from our private monorepo.
 These features are documented in the issue tracker.
+
+# Telemetry & privacy policy
+
+This ruleset collects limited usage data via [`tools_telemetry`](https://github.com/aspect-build/tools_telemetry), which is reported to Aspect Build Inc and governed by our [privacy policy](https://www.aspect.build/privacy-policy).
diff --git a/aws/extensions.bzl b/aws/extensions.bzl
index 432ed56..d87ea2e 100644
--- a/aws/extensions.bzl
+++ b/aws/extensions.bzl
@@ -10,6 +10,7 @@ names (the latest version will be picked for each name) and can register them as
 effectively overriding the default named toolchain due to toolchain resolution precedence.
 """
 
+load("@aspect_tools_telemetry_report//:defs.bzl", "TELEMETRY")  # buildifier: disable=load
 load("@bazel_skylib//lib:new_sets.bzl", "sets")
 load(":repositories.bzl", "aws_register_toolchains")