Privacy

Last updated 5 September 2026. DevRoundsis run by one independent developer in Brazil, so this follows Brazil's data protection law (LGPD). It is short on purpose — please actually read it.

The one thing people ask first

We never receive your voice.Your browser turns your speech into text on your device. Only that text is sent to the coach so it can answer you, and we don't store it. When the round is over, your words are gone from our side.

What we keep

Your account

  • Your email address and the name you gave us.
  • A scrambled version of your password (a hash — we can't read it back), and whether you confirmed your email.
  • If you sign in with Google: the email and name Google shares. We get nothing else from your Google account.
  • When you signed up and each time you signed in.
  • If you buy a pass: which pass, when, and Stripe's reference for the payment. Your card details go to Stripe only; we never see them.

How you use the site

  • Which round you practised, when it started, how many turns it had, how many tips you got, and the level the coach estimated.
  • Whether a round finished, and whether a request to the coach failed — this is how we find out the site is broken before you have to tell us.
  • If you take the free level check, the level the coach gave and how long your answers were. Your three answers are sent to the coach to be graded and are not stored anywhere.
  • The buttons that matter to the flow: pressing Start, ending a round, hitting the daily limit, opening pricing, sharing a result.
  • Feedback you type into the box on the recap screen.
  • A recording of how you move through the pages — where you click, scroll and hesitate — so we can see what confused someone instead of guessing. The conversation, your corrections and anything you type are blanked out of the recording before it leaves your browser; what we can watch is the interface, not your words.
  • The link you arrived on the first time — campaign tags in the URL (the utm_ parameters and Google's ad-click id) and the domain that referred you. This is attached to your account when you sign up, so we know which of our ads or posts actually brought in people who practise.

What we don't keep: what you said, what the coach replied, your audio, your IP address as a record (it is used briefly to slow down abuse, not stored against you).

On your device, not on our servers

  • Your progress — streaks, XP, badges, the corrections you can review — lives in your browser's local storage. We don't have a copy. Clear your browser data and it's gone.
  • Your settings: voice, language, persona, music on or off.
  • A random visitor id, so the steps you took before signing up can be connected to your account afterwards.

What we do with it

  • Run the service: sign you in, remember your pass, cap daily use.
  • See where it breaks, and fix it.
  • Understand what to improve — which rounds people finish, where they give up.
  • Know which ads and posts bring people who actually practise, so we spend on those and not the others.
  • Occasionally write to you about youraccount — for example if you signed up and something seems to have gone wrong. Reply “stop” to any such email and we won't write again.

We don't sell your data, we don't share your email with advertisers, and there are no third-party ad networks on the site.

The legal basis, in LGPD terms

Running the service you signed up for is performance of a contract (Art. 7, V). The usage records, the failure logs and the occasional account email rest on legitimate interest (Art. 7, IX): a small product can't improve or stay up without knowing what fails, and we keep what we collect to the minimum that answers that. Nothing here relies on a consent checkbox, so there is none to withdraw — instead you have the rights below.

Who handles data on our behalf

A few companies do work we can't do ourselves. Each receives only what its job needs. Most are in the United States, so this is an international transfer under LGPD Art. 33, made to providers with contractual data-protection commitments.

  • Anthropic— the coach's brain. Receives the text of the current round to write the reply and the recap. Under its API terms it doesn't use that text to train models.
  • OpenAI— the coach's voice. Receives the coach's own lines to turn them into audio. Never your words.
  • Google — sign-in with Google. Google's advertising tag also runs on our pages and sets a cookie so Google can tell that someone who clicked our ad later signed up; that cookie is Google's, and their privacy policy governs it.
  • Stripe — payments. Handles your card; tells us your email and which pass you bought.
  • Vercel — hosts the site and counts page views anonymously (no cookies, no ids).
  • PostHog (EU servers) — stores the page recordings and click events described above, linked to your account once you sign in.
  • Neon — the database where the account and usage records above live.
  • Brevo — sends the confirmation and password-reset emails.
  • Upstash — the counters behind the daily limit and abuse protection.

How long

Account data stays while the account exists. Usage records are kept so the aggregate numbers (how many rounds were finished this month) stay right; when you delete your account, records that identify you are deleted or made anonymous. Feedback you wrote is kept as long as it's useful for improving the product. Whatever sits in your browser stays until you clear it.

Your rights

Under LGPD Art. 18 you can ask what we hold about you, have it corrected, have it deleted, ask who it was shared with, and object to the processing above. To do any of that, email den.roadkill333@gmail.com. You'll get an answer from a human within 15 days, usually much sooner. If you think we got something wrong, you can also complain to the ANPD, Brazil's data protection authority.

Cookies and storage

  • One session cookie that keeps you signed in. Essential; no tracking.
  • Google's advertising cookie, described above, on the pages where the tag runs.
  • PostHog's cookie and local storage, which keep the page recording in one piece across pages.
  • Local storage for your progress, settings and the visitor id. Nothing here is read by anyone but this site.

Changes

When what we collect changes, this page changes with it, and the date at the top moves. If a change matters — new data, a new purpose — we'll email account holders before it takes effect.

← Back to DevRounds