At DevBits, accessible from devbits.ai, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected, processed, and recorded by DevBits and how we protect it.
1. Information We Collect
When you authenticate using Google Social Sign-in, we collect basic profile details including your name, email address, profile photo URL, and a unique provider identifier.
In addition, our systems collect active session telemetry when you are logged in. This includes your IP address, browser type, device type (parsed from the User-Agent header), session expiration timestamps, and session tokens.
We also collect user-generated interactions:
- News likes and recommendations, associating your user account identifier with specific curated news dispatches.
- "Letters to the Editor" feedback dispatches, containing your email, identifier, and the message content you submit.
2. How We Use Your Information
We use the collected database details solely to:
- Authenticate your account session securely using Better Auth tokens.
- Provide and maintain your customized feed preferences and saved liked news dispatches.
- Improve, personalize, and expand our news curation services.
- Monitor, list, and let you revoke active session terminal devices from your user profile.
- Deliver your feedback dispatches directly to the systems administration and editorial board.
3. Data Storage & Infrastructure
All user profiles, sessions, likes, and feedbacks are stored within our database instances, hosted on a Neon PostgreSQL serverless cloud cluster. Database tables are structured and updated using the Drizzle ORM schemas. Secure HTTP-only cookies are utilized to synchronize authenticated client sessions with the Express endpoints.
Client visualization properties (such as CRT display controls, font families, text scaling, parchment warmness sliders, and scanline/grain layers) are stored purely on the client side in the browser's localStorage, so this information is never transmitted to or processed by our servers.
4. Third-Party Integrations
Our authentication integrations communicate directly with Google OAuth APIs. We do not sell, trade, or share your profile details or device logs with external marketing partners.
5. Your Rights and Data Deletion
You have the right to inspect your session logs, terminate individual login terminals via the Security Dossier view, and request total deletion of your authenticated user details, liked recommendations, and feedback dispatches. To purge your account data entirely, please contact our systems administrator. Your records will be deleted from our Neon PostgreSQL database instances immediately.