Privacy policy
Last updated: October 3, 2026
DevList.app is a hand-curated directory of software engineering resources, run by Shawn McAllister. This policy explains what the site stores about you, why, and what you can ask us to do with it. Questions go to our support tracker.
What we store
If you only read the site, we store nothing about you. We count page views by page, as a number per page; the count holds nothing about who visited. When someone requests a page that does not exist, we log the path they asked for, without any query string, so we can fix broken links.
If you create an account, we store your name, your email address, a hash of your password (never the password itself), when you verified your email address, and when the account was created and last changed.
If you submit or claim a listing, we store what you write for it (its title, summary, description, link and categories), the images you upload or ask us to fetch from your site, its review history, and each claim you start with its token. Listings describe and link to resources; approved listings are public.
When you use a feature that reads your site, such as fetching a screenshot, claiming a listing or checking your DevList link, our server requests the addresses that feature names (your listing's page, a claim file, or your repository's README) and keeps only the result: the image, whether the claim token was found, or whether the link was found and when.
Administrative actions such as approvals, rejections, suspensions, claims and role changes are recorded in an audit history that names the account that acted.
We send email only for your account and your listings: verifying your address, resetting your password, and telling you about the review and publication of your listings. We do not send newsletters or marketing, and we do not sell or share your address.
Payments
The site does not charge for listings today. If paid placement is offered later, payments are handled by the provider you choose at checkout (Stripe, Paddle or NOWPayments). We never see or store your card details; we keep the provider's reference for each purchase, its amount and its status, so we can fulfil and support it.
Cookies
We use only the cookies below. Necessary cookies keep you signed in and protect forms from forgery; they are always on. The cookie banner lets you accept all, keep necessary cookies only, or choose measurement and marketing separately. Measurement runs only with your consent, and the banner says when the site measures visits; marketing is not used. The other cookies are set only when you choose them. Change your consent at any time with Cookie settings in the footer.
| Name | Purpose | Lifetime | Kind |
|---|---|---|---|
| __Host-devlist_session | Keeps you signed in and remembers your session. | 2 hours | Necessary |
| XSRF-TOKEN | Protects forms from forged requests. | 2 hours | Necessary |
| __Host-remember_me | Keeps you signed in when you choose Remember me. | 30 days | Your choice |
| cookie_consent | Remembers your cookie choice. | 1 year | Your choice |
| site_appearance | Remembers the light or dark theme you choose. | 1 year | Your choice |
Who else handles your data
The site runs on servers we rent and sends email through an email delivery provider; both process data only to run the site for us. If you pay for placement, your payment provider handles the payment under its own privacy policy. We do not sell personal data.
How long we keep it
We keep your account and listings until you ask us to delete them. Sessions end when you sign out or they expire. Claim tokens stop working after 7 days. Page view counts and the missing-page log hold no personal data. The audit history is kept, because it is the record of who did what.
Your choices
You can change your listings from your dashboard. To see what we hold about you, correct it, or delete your account and your listings, open an issue on our support tracker with the name on your account and what you want. Issues are public, so leave out your email address and other personal details. We answer within 30 days.
Children
The site is for developers and is not directed at children under 13. We do not knowingly keep an account for a child under 13; if you believe we do, tell us on the support tracker, without personal details, and we will delete it.
Changes
When this policy changes, we update the date at the top. If a change affects what we store about account holders, we tell them by email before it takes effect.