Privacy Policy

This Privacy Policy explains how DevMoment (“we”, “us”, or “our”) collects, uses, and protects your personal data when you visit this website. We are an independent editorial publication, and we are the data controller responsible for the personal data described here. We are committed to handling your data lawfully, fairly, and transparently in line with the EU General Data Protection Regulation (GDPR) and applicable national data protection law.

Who we are (data controller)

DevMoment is the data controller for personal data processed through this site. If you have any question about this policy or about how we handle your data, or if you want to exercise any of the rights described below, please reach us through our contact form. We do not publish a direct contact email; the contact form routes your message to the team responsible for privacy matters.

Personal data we collect

We keep data collection to a minimum. The categories of data we process are:

• Contact form submissions. When you use our contact form, we collect the information you choose to provide, such as your name, your email address, the reason for contact, and the content of your message. We use this only to read and respond to your enquiry.
• Analytics data. With your consent, we use Google Analytics 4 (GA4) to understand how the journal is read. This may include pages viewed, approximate location derived from a truncated IP address, device and browser type, referral source, and on-page interactions. We do not use this data to identify you personally.
• Consent and preference cookies. We store your cookie and analytics consent choice, and your light or dark theme preference, so the site behaves the way you expect on your next visit. See our Cookie Policy for the full list.

We do not knowingly collect special categories of data, and we do not buy or sell personal data.

How we use your data

• To receive, read, and respond to messages you send through the contact form.
• To measure and improve how our editorial content is read and navigated.
• To remember your consent choice and display preferences.
• To keep the site secure and to diagnose technical problems.

Legal bases for processing

Under the GDPR, we rely on the following legal bases:

• Consent (Article 6(1)(a)) for analytics and any non-essential cookies. You give consent through our banner and can withdraw it at any time.
• Legitimate interests (Article 6(1)(f)) for responding to enquiries you initiate and for keeping the site secure and functional, balanced against your rights and freedoms.

Cookies and analytics

Analytics cookies are set only after you accept them in our consent banner. If you decline, GA4 is not loaded and no analytics cookies are placed. Essential preference cookies that remember your choices do not require consent because the site cannot function correctly without them. Full details, including cookie names and durations, are in our Cookie Policy.

Third-party processors

We share data only with the service providers we need to run the site, and only to the extent necessary. These processors act on our instructions under data processing agreements:

• Hosting and content delivery (such as Vercel and Cloudflare), which process technical request data, including IP addresses, to serve and protect the site.
• Google Analytics (Google Ireland Limited), which processes the analytics data described above, only with your consent.

Some processors may transfer data outside the European Economic Area. Where that happens, the transfer is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Data retention

We keep contact form submissions only for as long as needed to handle your enquiry and any reasonable follow-up, and then we delete or anonymise them. Analytics data is retained for a limited period in line with our GA4 configuration (no longer than 14 months) and is held in aggregated, non-identifying form thereafter. Consent and preference cookies last only for their stated durations.

Your rights under the GDPR

If you are in the EEA or the UK, you have the right to:

• Access the personal data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure of your data (the right to be forgotten).
• Restriction of processing in certain circumstances.
• Data portability, to receive your data in a structured, machine-readable format.
• Objection to processing based on legitimate interests.
• Withdraw consent at any time, without affecting prior lawful processing.

To exercise any of these rights, contact us through our contact form. We respond within the timeframes required by law. You also have the right to lodge a complaint with your local data protection supervisory authority.

Children's privacy

This site is intended for a professional, adult audience of developers. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Updated” date at the top of this page. We encourage you to review it periodically.

Contact us

For any privacy question or to exercise your rights, use our contact form. We read everything.