Privacy Policy
Last updated: March 2026
1. Who is responsible for your data
Dev Platform is a self-hosted service operated by a private individual. It is not a registered company. The operator can be reached at privacy@devplat.ch.
2. What data we collect
When you create an account we store:
- Email address — used for login and support communication.
- Display name — shown in the console UI.
- Password hash — your password is hashed with scrypt before storage. The plain-text password is never stored.
- Plan / subscription status — which plan you are on.
When you use environments we store:
- Environment metadata (name, kind, creation time, expiry, status).
- Activity log entries (create, stop, delete events).
We do not collect analytics, tracking pixels, third-party cookies, or fingerprinting data.
3. How your data is stored
All data is stored on a home server in JSON files on disk. There is no third-party cloud database involved. The server is located in the EU.
Backups are taken manually and infrequently. Data durability is not guaranteed. Do not rely on this platform for important data.
4. How your data is used
Your data is used exclusively to:
- Authenticate you to the console.
- Provision and track your environments.
- Send you support replies when you contact us.
- Process subscription billing (if applicable).
Your data is never sold, rented, or shared with third parties for marketing purposes.
5. Cookies and local storage
We set one httpOnly session cookie (auth_session) on login. This cookie is used solely for authentication.
The console also uses localStorage in your browser to remember preferences (dark mode, active tab). This data never leaves your device.
No third-party cookies are set.
6. Data retention
Account data is retained for as long as you have an active account. Expired environment data is deleted automatically when the TTL elapses.
You can request deletion of your account and all associated data at any time by emailing privacy@devplat.ch. Deletion will be completed within 30 days.
7. Your rights (GDPR)
If you are located in the EU or EEA, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict processing of your data.
- Receive a copy of your data in a portable format.
To exercise any of these rights, email privacy@devplat.ch. Given the small scale of this project, requests are handled personally and promptly.
8. Security
Passwords are stored as scrypt hashes. Session tokens are stored in httpOnly cookies. Environments are network-isolated by default.
However, this is a home-hosted service. No penetration testing has been performed. If you discover a security issue, please report it to security@devplat.ch — see our Security page for details.
9. Changes to this policy
If this policy changes significantly, registered users will be notified by email. The “Last updated” date at the top of this page will always reflect the most recent revision.
10. Contact
Questions about this privacy policy? Email privacy@devplat.ch. Every message is read personally.