Last updated 20 April 2026.

The short version

No ad tracking. We don't run third-party ad pixels. No Facebook Pixel, no Google Ads, no LinkedIn Insight.
Minimal analytics. We use a single privacy-preserving analytics product (configurable at NEXT_PUBLIC_GA_ID) when enabled. If it isn't set, no analytics scripts load.
Contact forms. When you submit a contact form, we store your name, email, company, and message so we can reply. We don't add you to a marketing list automatically.
Newsletter. Opt-in only. If you subscribe, we'll send you monthly essays. Every email has a one-click unsubscribe.
Cookies. A single preference cookie stores your theme choice (theme-preference). No tracking cookies.
Right to be forgotten. Email privacy@devdocs.work and we'll delete every record we have of you within seven calendar days.

Detail

Who this applies to

This policy covers https://devdocs.work and every subpath of that domain. It does not cover devdocs.ai, which is a separate product with its own policy.

What we collect

When you visit pages we may log, via our hosting provider:

Request metadata — URL, HTTP method, response status, approximate timing. Used for performance debugging and uptime monitoring.
Coarse geolocation (country-level) derived from IP by the CDN. Not stored with your personally identifiable identifiers.
A theme preference cookie — theme-preference — stored in your browser. Local only; we never read it server-side.

When you submit a form we store:

The values you typed (name, email, company, message).
A timestamp and the URL the submission came from. Used to route the message to the right practitioner.

How we use it

To respond to your inquiry. Your contact submission is read by a human; no AI nurture sequences, no automated follow-up funnels.
To understand aggregate traffic patterns. Analytics data is sampled at the aggregate level — we can see "100 people read post 2 last week"; we cannot see which 100.
To keep the site online. Hosting and uptime logs are retained for 30 days and then deleted.

How long we keep it

Contact-form submissions: indefinitely, unless you ask us to delete them. We periodically purge inactive records.
Newsletter subscribers: until you unsubscribe.
Analytics: retention matches the provider's default.
Server logs: 30 days.

Who sees it

DevDocs practitioners directly working on your engagement (if any) and the small operational team maintaining the site. We do not sell, rent, or syndicate your data.

Subprocessors

Vercel — hosting, CDN, and build infrastructure.
AWS SES — transactional email for contact replies and newsletter delivery.
Google Analytics (optional) — only active when NEXT_PUBLIC_GA_ID is set in production environment.

Your rights

You can ask at any time:

What we have on file for you
For a copy of that data
For it to be corrected
For it to be deleted

Email privacy@devdocs.work. We respond within seven calendar days.

Security

The site is served over HTTPS with HSTS. Server-side logs are restricted to the ops team. Contact-form data is encrypted at rest. Our vulnerability-disclosure contact lives at /.well-known/security.txt.

Changes to this policy

If we change this policy we'll update the "Last updated" date and — for material changes — email subscribers with a summary.

Questions

privacy@devdocs.work or the contact form.