# Privacy policy

Last updated: October 3, 2026

DevList.app is a hand-curated directory of software engineering resources,
run by Shawn McAllister. This policy explains what the site stores about
you, why, and what you can ask us to do with it. Questions go to our
[support tracker](https://github.com/eas4ai/devlist-support/issues).

## What we store

**If you only read the site,** we store nothing about you. We count page
views by page, as a number per page; the count holds nothing about who
visited. When someone requests a page that does not exist, we log the path
they asked for, without any query string, so we can fix broken links.

**If you create an account,** we store your name, your email address, a
hash of your password (never the password itself), when you verified your
email address, and when the account was created and last changed.

**If you submit or claim a listing,** we store what you write for it (its
title, summary, description, link and categories), the images you upload
or ask us to fetch from your site, its review history, and each claim you
start with its token. Listings describe and link to resources; approved
listings are public.

**When you use a feature that reads your site,** such as fetching a
screenshot, claiming a listing or checking your DevList link, our server
requests the addresses that feature names (your listing's page, a claim
file, or your repository's README) and keeps only the result: the image,
whether the claim token was found, or whether the link was found and when.

**Administrative actions** such as approvals, rejections, suspensions,
claims and role changes are recorded in an audit history that names the
account that acted.

## Email

We send email only for your account and your listings: verifying your
address, resetting your password, and telling you about the review and
publication of your listings. We do not send newsletters or
marketing, and we do not sell or share your address.

## Payments

The site does not charge for listings today. If paid placement is offered
later, payments are handled by the provider you choose at checkout
(Stripe, Paddle or NOWPayments). We never see or store your card details;
we keep the provider's reference for each purchase, its amount and its
status, so we can fulfil and support it.

## Cookies

We use only the cookies below. Necessary cookies keep you signed in and
protect forms from forgery; they are always on. The cookie banner lets you
accept all, keep necessary cookies only, or choose measurement and marketing
separately. Measurement runs only with your consent, and the banner says
when the site measures visits; marketing is not used. The other cookies are
set only when you choose them. Change your consent at any time with Cookie
settings in the footer.

| Name | Purpose | Lifetime | Kind |
| --- | --- | --- | --- |
| __Host-devlist_session | Keeps you signed in and remembers your session. | 2 hours | Necessary |
| XSRF-TOKEN | Protects forms from forged requests. | 2 hours | Necessary |
| __Host-remember_me | Keeps you signed in when you choose Remember me. | 30 days | Your choice |
| cookie_consent | Remembers your cookie choice. | 1 year | Your choice |
| site_appearance | Remembers the light or dark theme you choose. | 1 year | Your choice |


## Who else handles your data

The site runs on servers we rent and sends email through an email delivery
provider; both process data only to run the site for us. If you pay for
placement, your payment provider handles the payment under its own
privacy policy. We do not sell personal data.

## How long we keep it

We keep your account and listings until you ask us to delete them.
Sessions end when you sign out or they expire. Claim tokens stop working
after 7 days. Page view counts and the missing-page log hold no personal
data. The audit history is kept, because it is the record of who did what.

## Your choices

You can change your listings from your dashboard. To see what we hold
about you, correct it, or delete your account and your listings, open
an issue on our [support tracker](https://github.com/eas4ai/devlist-support/issues) with the name on
your account and what you want. Issues are public, so leave out your email
address and other personal details. We answer within 30 days.

## Children

The site is for developers and is not directed at children under 13. We
do not knowingly keep an account for a child under 13; if you believe we
do, tell us on the support tracker, without personal details, and we will
delete it.

## Changes

When this policy changes, we update the date at the top. If a change
affects what we store about account holders, we tell them by email before
it takes effect.