Privacy Policy

1. Introduction

DevStash ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our read-it-later application for developers.

2. Information We Collect

2.1 Authentication Information

When you sign in with GitHub, we receive the following information from GitHub OAuth:

• Your GitHub username
• Your GitHub profile information (name, email if public)
• OAuth tokens for authentication purposes

2.2 Session Data

We use JSON Web Tokens (JWTs) for session management. Session tokens are stored in your browser and are used to authenticate your requests to the Service.

2.3 Bookmark Data

Your bookmarks (URLs, titles, descriptions, and metadata) are stored securely in Supabase, a cloud database platform. Your data is protected with Row Level Security (RLS) encryption.

3. How We Use Your Information

We use the information we collect to:

• Authenticate you with GitHub
• Store and manage your bookmarks securely
• Provide the core functionality of the Service
• Maintain and improve the Service
• Respond to your inquiries and support requests

4. Data Storage and Location

Your bookmark data is stored securely in Supabase, a modern cloud database platform. Your data is protected with Row Level Security (RLS), ensuring only you can access your bookmarks. The data is encrypted and stored on Supabase's secure infrastructure.

Session data is stored as JSON Web Tokens (JWTs) in your browser. These tokens are used exclusively for authentication and session management.

5. Third-Party Services

We use the following third-party services:

• GitHub: For authentication only
• Supabase: For secure data storage
• Vercel: For hosting and infrastructure

We do not share your personal information with any other third parties. Data provided to these services is used exclusively to support the Service's functionality.

6. Data Retention

Session tokens are stored in your browser and remain valid until you sign out or the token expires. Your bookmark data is stored securely in Supabase until you delete it. You can delete your bookmarks at any time through the Service.

7. Your Rights and Choices

You have the right to:

• Access your bookmark data at any time
• Delete your bookmarks at any time
• Revoke GitHub OAuth access through your GitHub account settings
• Export your data at any time

8. Security

We implement appropriate technical and organizational measures to protect your information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

9. Children's Privacy

DevStash is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at @_davidnemes on X (Twitter).