Privacy Policy
Last updated: June 22, 2025
1. Overview
DevConvert ("we", "our", or "us") operates the website at https://devconvert.dev and the DevConvert Chrome Extension (together, the "Service"). This Privacy Policy explains what data we collect, how we use it, and your rights.
We do not sell your personal data to third parties. We do not use your data for purposes unrelated to providing the conversion service. We do not use your data to determine creditworthiness or for lending purposes.
2. Data We Collect
2.1 Website (devconvert.dev)
- Account information: When you register, we collect your name and email address. If you sign in with Google, we receive your name, email, and profile picture from Google OAuth.
- Authentication credentials: Passwords are hashed with bcrypt (cost factor 12) and never stored in plain text.
- Payment information: Payments are processed by Razorpay. We receive a payment ID and subscription status confirmation — we never see or store your card number or banking details.
- Usage logs: When you convert data, we may log the input format, output format, your user ID (if logged in), and your IP address. We do not log the content of your conversions unless you explicitly save them to your account.
- Saved conversions: Only stored if you are a paid subscriber and have enabled "Save history" in Settings. You can delete them at any time.
2.2 Chrome Extension
- Selected text (website content): When you trigger a conversion, the text you have selected on the current page is sent to the DevConvert API for processing. This text is used solely to perform the conversion and is not stored on our servers.
- Authentication token: If you log in via the extension popup, your session token is stored in
chrome.storage.localon your device. It is sent only to the DevConvert API to verify your subscription status. - Preferences: Your preferred output format is stored locally in
chrome.storage.local. It never leaves your device. - No web history: The extension does not read, record, or transmit your browsing history or URLs you visit.
- No user activity tracking: The extension does not log clicks, mouse movements, keystrokes, or scroll position.
3. How We Use Your Data
- To provide the conversion service and return results to you.
- To manage your account and subscription.
- To enforce rate limits for free-tier users.
- To send transactional emails (e.g., password reset) — no marketing emails without consent.
- To improve the service using aggregated, anonymised analytics.
4. Data Sharing
We share data only with the following sub-processors, strictly to operate the service:
| Provider | Purpose | Data shared |
|---|---|---|
| Railway | Hosting | All server-side data |
| Razorpay | Payments | Name, email, payment amount |
| Google OAuth | Sign-in | Name, email (if you choose Google login) |
| Upstash Redis | Rate limiting | Hashed user/IP identifier |
We do not share your data with any other third party.
5. Data Retention
- Account data is retained until you delete your account.
- Usage logs are retained for up to 90 days.
- Saved conversions are retained until you delete them or your account.
- Extension local storage is cleared when you log out or uninstall the extension.
6. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. To exercise any of these rights, email us at privacy@devconvert.dev. We will respond within 30 days.
You can delete all your saved conversions at any time from Settings → Delete my data.
7. Cookies
We use a single session cookie set by NextAuth to keep you logged in. We do not use advertising, tracking, or analytics cookies. Third-party scripts (Google Analytics, PostHog) may set their own cookies only if you have not opted out via your browser settings.
8. Security
Passwords are hashed with bcrypt. Data in transit is encrypted via TLS. We apply rate limiting, input size limits, and output format allowlists to protect the service. No system is perfectly secure; please use a strong, unique password.
9. Children
DevConvert is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us data, contact us and we will delete it promptly.
10. Changes to This Policy
We will post any changes to this page and update the "Last updated" date. For material changes, we will notify logged-in users by email.
11. Contact
Questions? Email us at privacy@devconvert.dev.