DevDeck Privacy Policy

Last updated: August 26, 2026

DevDeck ("the app") is a desktop app from EERIE for tracking the outstanding work across the projects you maintain. Everything you create is kept on your own device. If you choose to create an account, a copy is also kept on a server we run, so your other devices show the same list.

What we collect

Nothing at all unless you create an account. Without an account the app never contacts us and we hold no data about you. If you do create one, we hold your email address, a scrambled form of your password, and a copy of your own task data. There is no analytics, no telemetry and no tracking in either case.

Where your data lives

Your projects, tasks, sub-tasks, notes, dates, templates and app settings are stored on your device, in the app's own storage folder, together with two rolling backup copies the app keeps for you. Settings shows you the exact folder and can open it, and lets you move the data file to a folder of your choosing (see below).

Accounts

An account is optional. It exists so that signing in on another computer brings your list with you. To create one you give an email address and pick a password.

Your password never leaves your device. The app scrambles it on your own machine first, and only the scrambled result is sent to us. What we keep is a further scrambled form of that, so the password itself cannot be worked out from anything we hold, by us or by anyone who obtained a copy of our records.

We keep your email address, that scrambled password, the date the account was made, whether the address has been confirmed, and an internal reference that ties the account to your saved data. We do not keep your name, your device details, your location, or your IP address.

Emails we send

We send email only to confirm your address when you sign up, and to send a code if you ask to reset your password. Both are six digit codes that stop working after fifteen minutes. We do not send newsletters, marketing or any other mail. These messages are sent through Resend, an email delivery service, which handles your address under its own privacy policy in order to deliver them.

Your task data on the server

When you are signed in, the app keeps a copy of your data file on a server we run on Cloudflare, and stores the time it was last saved. That copy is encrypted before it is written, with a key held only by our service and never stored alongside the data, so the stored records are unreadable on their own. Your email address is not encrypted, because it has to be looked up when you sign in.

Signing out on a device stops that device syncing and leaves your other devices working. It does not delete the copy on the server. To have your account and everything stored with it deleted, email us at the address below and we will remove it.

Using DevDeck on more than one computer

Settings lets you choose a different folder to keep your data file in, so another computer running DevDeck can open the same list without an account. If you pick a folder that a cloud drive such as iCloud Drive, OneDrive or Dropbox syncs for you, that provider will store and transfer the file under its own privacy policy and terms. This is your choice, it is off unless you turn it on, and you can switch back to this computer only at any time.

Backups

Export writes a backup file to a location you choose, and Import reads a backup file you select. The app can also export a project's task list as a markdown file to a location you choose. These files stay on your device and under your control. The app never uploads them.

Reminders

When you give a task a reminder, the app asks the operating system for permission to show notifications and then shows the reminder on your own device. Nothing about the task is sent anywhere.

Clipboard

When you press the copy button next to a note, the app writes that text to your clipboard. It never reads your clipboard, and nothing is sent anywhere.

Network use

With no account signed in, the app works fully offline and does not connect to any server. Its fonts are bundled inside the app, so no web fonts are fetched. Connections are opened only when you sign up or sign in, while you are signed in and your list is being kept in step, or when you choose to click a link, such as the footer links or a link you wrote in a task's notes, which opens that page in your default browser under that site's own privacy policy.

What we don't collect

The app does not collect analytics, telemetry, usage data, or device information. It does not use advertising SDKs. We do not sell or share your data with anyone, and we do not use it to build a profile of you.

Your rights

You can ask us for a copy of what we hold about your account, ask us to correct it, or ask us to delete it, by emailing the address below. Deleting the account removes the email address, the scrambled password and the stored copy of your task data. The copy on your own device is yours and is not affected.

Children's privacy

DevDeck is not aimed at children and we do not knowingly collect personal information from them.

Third-party distribution

If the app is obtained through the Microsoft Store, Apple App Store, or another platform, the respective platform may process data related to download, purchase, and licensing under their own policies. This policy describes only processing performed by the DevDeck app itself.

Changes to this policy

If this policy changes, the updated version will be posted at this URL with a new "Last updated" date.

Contact

eeriegoesd@gmail.com