Privacy Policy

Last updated: July 07, 2026

This Privacy Policy describes how Devlio ("we," "us," or "our") collects, uses, and protects your personal information when you use our platform.

1. Information We Collect

1.1 Information You Provide

  • Account information: Username, email address, and password (hashed)
  • Profile information: Avatar, bio, and social links you choose to add
  • Project content: Files, descriptions, screenshots, and other materials you upload
  • Communications: Messages sent through the contact form or support channels

1.2 Information Collected Automatically

  • Usage data: Pages visited, projects viewed, search queries, and download activity
  • Device information: Browser type, operating system, screen resolution, and device type
  • Network data: IP address, approximate geographic location (country/region), and referring URL
  • Session data: Login timestamps, session duration, and authentication method used

1.3 Third-Party Authentication

If you sign in using Discord or Google, we receive your basic profile information (username, email, avatar) as authorized by you through those services. We do not access your contacts, messages, or other private data from these services.

2. How We Use Your Information

We use your information to:

  • Operate and maintain the platform
  • Process transactions and manage creator earnings
  • Send account-related notifications (security alerts, project updates, review notifications)
  • Detect and prevent fraud, spam, and abuse
  • Analyze platform usage to improve our services
  • Enforce our Terms of Service and Moderation Guidelines

3. Data Sharing

We do not sell your personal data. We share information only in these limited cases:

  • Payment processing: Transaction data is shared with Polar.sh to process payments. Polar.sh has its own privacy policy governing payment data.
  • Email delivery: Email addresses are shared with our email service provider for sending notifications and verification codes.
  • Legal requirements: We may disclose information if required by law, court order, or to protect the safety of our users and platform.
  • Service providers: We use cloud hosting and backup services that may store data as part of infrastructure operations. These providers are bound by confidentiality agreements.

4. Data Security

We implement security measures including:

  • Password hashing with bcrypt
  • Rate limiting on authentication endpoints
  • HTTPS encryption for all data in transit
  • Input validation and sanitization
  • IP-based session tracking and ban enforcement
  • Regular backups with encrypted storage

No system is completely secure. If you discover a security vulnerability, please report it responsibly through our contact page.

5. Data Retention

  • Active accounts: Data is retained as long as your account is active
  • After deletion: Account data is removed within 30 days. Some data may be retained longer for legal, security, or fraud prevention purposes
  • Project files: Uploaded files are retained as long as the project exists on the platform
  • Logs: Server logs are automatically rotated and deleted after 90 days

6. Your Rights

You have the right to:

  • Access: View all personal data we hold about you
  • Correct: Update inaccurate or incomplete information through your profile settings
  • Delete: Request complete account and data deletion by contacting us
  • Export: Request a copy of your personal data
  • Object: Opt out of non-essential data processing

7. Cookies and Tracking

We use only essential cookies for authentication and security. We do not use third-party analytics, advertising, or tracking cookies. See our Cookie Policy for details.

8. Children's Privacy

Devlio is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this policy periodically. Significant changes will be communicated via email or platform notification. The "Last updated" date at the top reflects the most recent revision.

10. Contact

For privacy-related inquiries, data requests, or to report a concern, please contact us.