Privacy, in plain language.

Visiting the website

This website is operated by DM Projects and hosted on Vercel. The hosting service processes the technical information needed to deliver pages, such as your IP address and request details. This version of the website does not include advertising trackers or marketing cookies.

Your display preference

If you switch between light and dark mode, we store that choice in your browser’s local storage. It stays on your device and is used to remember your preferred appearance. You can remove it by clearing this website’s browser data.

Contacting us

When the contact form is available, it asks for your name, email address, the app your question concerns and your message. We use those details to respond to your request. Please do not include passwords, payment details or other sensitive information.

The form uses Cloudflare Turnstile to check for automated submissions. Contact requests are subject to a short-lived rate limit stored in Upstash using a keyed hash of your IP address. The counter expires after ten minutes and does not contain your message. We do not use contact messages for marketing.

Contact details, messages and replies are stored in DM HQ, our private support inbox. Its website is hosted on Vercel and its database uses Convex in EU West (Ireland). Conversations remain stored until removed; there is currently no automatic deletion period.

Each request has its own ticket number and private conversation link. We send a confirmation and notify you by email when we reply or have a meaningful update. You can answer by email or in the ticket. No account or email confirmation is required. Anyone holding the private link can access that ticket. HQ uses an essential, secure cookie to remember access to that ticket; the private link remains reusable in another browser or after the cookie expires.

Resend handles outgoing and incoming email and retains message content and delivery records under its data retention policy. Email replies are copied into DM HQ. Attachment contents are not imported into HQ in this version; received originals remain available at the mail provider. Our existing business email inbox is separate. Messages sent to that inbox before this integration remain there until removed.

Contact content, credentials and private ticket links are excluded from website analytics and application logs. Cookie expiry does not delete a conversation. Your email address is contact information, not verified identity.

Optional website analytics

When enabled, we use PostHog’s EU service to understand which pages people visit and which app store links they choose. Analytics starts only after you select “Allow statistics”. Declining does not affect access to the website, downloads or support.

We send the public page path, a broad source category such as Google or Instagram, and selected actions: app store clicks, social links, the app-idea invitation and successful contact delivery. A contact event includes only the selected topic. We do not send names, email addresses, message contents, private conversation links, URL query strings or search terms. We do not enable automatic interaction capture, session recordings or advertising profiles.

For visits through recognized DM Projects campaign links, page views and app store clicks can also include a fixed campaign code and the channel named in that link. We accept only our registered codes, not arbitrary query values or click identifiers. A shared link does not prove that you saw the original post, and a store click does not prove an installation or purchase.

After permission, PostHog uses a random browser identifier in a first-party analytics cookie with a 30-day lifetime, renewed with use, and session information in browser storage. A broad source category and any recognized campaign are remembered in session storage for up to 30 minutes so internal navigation can retain them. They are collected only after permission and cleared when you withdraw it. Network requests to the service necessarily involve your IP address. Our event configuration disables geographic enrichment, and our analytics project is configured to discard client IP data. The website does not connect this identifier to an app account or identify you by name.

Your analytics choice is stored locally for up to 180 days. You can change it using “Privacy settings” in the footer. Declining there stops new events and clears the analytics identifier on this device. Withdrawing permission does not undo processing that has already occurred. Preview and development deployments do not send analytics.

Analytics events are stored by PostHog for historical reports. Our project does not currently delete events automatically after a fixed period. The browser cookie and consent preference lifetimes above do not determine how long those server records remain stored.

More details are available in PostHog’s privacy notice.

Questions about your information

You can use our contact form to ask about information you have shared with us or request its correction or deletion.

App privacy information

For details about data handled inside an app, refer to its privacy information in the app or on its store listing.