1. Scope
This Privacy Policy describes information relevant to the DEVIN DMA website and associated services. We aim to limit processing to what is necessary to deliver those services, manage access, protect accounts and respond to support requests.
The public website does not provide its own account-registration or payment form. Purchases, account access and support take place through the linked store, dashboard and Discord services, which may also provide their own privacy notices.
2. Information used by the services
DEVIN uses limited operational information to maintain account access and software integrity:
- Last login time: records recent account activity. A login timestamp alone is not a measurement of playtime.
- Hardware identifier (HWID): associates access with licensed hardware and helps enforce the license terms.
- Most recent IP address: supports connection security. The account system retains the latest address rather than a history of previous account IP addresses. Website infrastructure may separately process technical connection information as described below.
- Support and order information: includes information you send when requesting help and the purchase details needed to investigate that request.
3. Data security
Account passwords are stored using salted, one-way hashes rather than readable passwords. Hashing is not reversible encryption. We apply safeguards intended to protect information from unauthorized access, but no online service can guarantee complete security or that a breach could never expose data.
IP addresses, hardware identifiers and account activity may constitute personal data. A VPN or proxy can change the IP address visible to a service, but it does not make your account or associated information anonymous.
4. Optional Web Radar and Player List services
Web Radar and Player List features are opt-in and disabled by default. When you enable them, in-game names are processed temporarily in server memory to provide the requested view to its intended recipients.
These names are not saved to long-term storage or disclosed outside the requested viewing service. The temporary session data is discarded when you disconnect. You can choose not to activate these features.
5. Website and external providers
The public website is served through Cloudflare. Delivering and securing a web request necessarily involves connection information such as an IP address and technical request details. This website does not include advertising trackers and does not set cookies of its own. When you follow a link to the store, campaign parameters (utm_*, ref) describing where the visit came from may be added to the address; they do not identify you.
Following a link to the store, dashboard or Discord takes you to that service. Information supplied there is handled in accordance with the applicable service’s notices and the purposes of your request.
Product pages show gameplay videos from the official DEVIN DMA YouTube channel. Until you press play, the page shows an image served by devindma.com and nothing is requested from YouTube. When you press play, the video loads from youtube-nocookie.com, Google's privacy-enhanced embed, and Google's privacy policy applies to that playback.
6. Website analytics and your choice
DEVIN measures how visitors find the site and which pages, trials and plans lead to orders, with its own first-party service on devindma.com (no advertising network, no third-party analytics tool). A banner asks for your choice; you can change it at any time with the button below.
Without your consent nothing is stored on your device. Pages still send anonymous events (the page, the product, the campaign in the address, the referring site, the language and a coarse device type) that are counted but cannot be linked to you, to other visits or to an order. The connection IP address is used only to limit abuse and is not stored with these events.
If you accept, a random attribution ID is stored in your browser (localStorage, for up to 390 days) together with a session marker (sessionStorage). It records the first and the latest source of your visits and the funnel steps you reach (product viewed, trial requested, store opened). The ID is added to links to the store, and the store reports it back with the invoice it creates, so an order can be tied to the source that brought it. Order records keep the amount, product, plan and a pseudonymous customer reference, not your email address. A free-trial code you paste in a Discord ticket is tied to your visit in the same way. Declining removes the ID from your browser.
Automated traffic and known crawlers are excluded. Raw events are kept for 180 days and visitor records for 13 months, except where an order needs them for accounting.
- Strictly necessary: dv_consent (your choice), dv_promo_closed (sessionStorage, remembers that you closed the sale announcement for this visit) and dv_internal (only set by DEVIN staff test links).
- Analytics, only with consent: dv_aid (attribution ID) and dv_session (session marker).
- Marketing: none.
7. Privacy questions and contact
Contact DEVIN support with a privacy question or request. We may need proportionate information to verify that a request relates to your account. We will not ask you to post passwords or other credentials publicly.