Terms of Service

By creating an account or using Devlune Webmaster ("the Service"), you agree to these Terms of Service. If you do not agree, do not use the Service.

1. Service Description

Devlune Webmaster provides website analytics, view counters, and custom form tools. The Service collects data from visitors of websites that install our tracking scripts ("End Users") on behalf of our customers ("You" / "Site Owners").

2. Data Collection

What we collect from End Users (visitors to your tracked sites):

• IP address — hashed with a daily-rotating salt for unique visitor counting. Raw IPs are never stored.
• User-Agent string — hashed for device/browser/OS classification. Raw UA is never stored.
• Geographic location — country-level only, derived from IP at the network edge (Cloudflare).
• Device type, browser, operating system — parsed from the hashed User-Agent.
• Page URL, referrer, UTM parameters — to track traffic sources and page performance.
• Custom events — if you use devlune.track(), event names and properties you define.
• Form submissions — any data End Users submit through your embedded forms.

What we do NOT collect:

• No cookies are set on End Users' browsers.
• No browser fingerprinting techniques are used.
• No cross-site tracking or advertising profiles.
• No personal data beyond what is listed above.

3. Data Processing & Storage

Analytics data is processed at the network edge (Cloudflare Workers) and stored in our database (Supabase/PostgreSQL). Data is retained according to your plan:

• Free: 7 days
• Pro: 90 days
• Studio: 2 years

After the retention period, data is permanently and irreversibly deleted.

4. Your Responsibilities as a Site Owner

• You must have a privacy policy on your website that discloses the use of Devlune Webmaster analytics.
• You must inform End Users that anonymized analytics data (country, device type, pages visited) is collected.
• You are responsible for the content of form submissions collected through your forms.
• You must not use the Service to collect sensitive personal data (health, financial, biometric) without appropriate legal basis.

5. GDPR & Privacy Compliance

Devlune Webmaster is designed to be GDPR-compliant without requiring cookie consent banners because:

• No cookies are set.
• No personal data is stored (only hashed, non-reversible identifiers).
• IP addresses are hashed with a daily-rotating salt — they cannot be traced back to individuals.
• Data is processed under the legitimate interest legal basis (Article 6(1)(f) GDPR).

6. Account & Billing

• You are responsible for maintaining the security of your account credentials.
• Paid plans are billed monthly. You may cancel at any time; access continues until the end of the billing period.
• We reserve the right to change pricing with 30 days notice.

7. Acceptable Use

You may not use the Service to:

• Track users without their knowledge on sites you do not own or operate.
• Collect data for the purpose of building advertising profiles or selling personal data.
• Circumvent rate limits or abuse the ingestion endpoints.
• Distribute malware or phishing content through embedded forms.

8. Limitation of Liability

The Service is provided "as is". Devlune's total liability is limited to the fees paid by you in the 12 months preceding any claim. We do not guarantee 100% uptime or data accuracy.

9. Termination

We may suspend or terminate accounts that violate these terms. Upon termination, all your data will be deleted within 30 days.

10. Changes to Terms

We may update these terms. Material changes will be communicated via email at least 14 days before taking effect. Continued use after changes constitutes acceptance.

11. Contact

Questions about these terms? Email legal@devlune.in