Legal
Privacy Policy
Last updated: June 1, 2026
Overview
DevTools ("we", "our", "us") operates tools.shafyha.com. We are committed to protecting your privacy. This policy explains what data we collect, why we collect it and how we use it.
The short version: most tools run entirely in your browser and send nothing to our servers. We collect only what is necessary to provide the service.
Data We Collect
Tools You Use (No Account)
JSON formatters, converters, generators, image tools and most other tools process all data locally in your browser. We receive no input data, no output data and no file contents from these tools.
Account Information
If you create an account, we collect your email address, hashed password (via Supabase Auth) and optionally your display name and avatar URL (for Google sign-in). We use this to authenticate you and associate your saved data (notes, QR codes, short links) with your account.
Usage Analytics
We use Google Analytics and Vercel Analytics to understand how the site is used — which pages and tools are visited, approximate geographic region (country/city level), browser type and device type. This data is aggregated and not linked to individual users unless you are signed in.
Payment Information
Payments are processed by NOWPayments (cryptocurrency). We do not store credit card numbers or cryptocurrency wallet keys. We receive payment confirmation, amounts and transaction IDs from our payment processor.
Chat Messages
If you use the messaging feature, your messages are stored encrypted in our database. Messages auto-delete after your configured retention period (default 24 hours). See the retention settings page to configure this.
How We Use Your Data
- Account management: to authenticate you, provide access to paid features and send transactional emails.
- Service improvement: to understand which tools are most useful, detect bugs and prioritize new features.
- Security: to detect and prevent abuse of our API and services.
- Communications: to notify you about important changes to the service. We do not send marketing emails without your explicit consent.
Data Retention
- Account data: retained while your account is active. You can delete your account at any time from the dashboard.
- Chat messages: deleted after your configured retention period (24 hours by default, up to forever on paid plans).
- URL short links: free tier links expire after 24 hours. Paid tier links persist until you delete them.
- Analytics data: governed by Google Analytics and Vercel Analytics retention policies (typically 14 months).
Third-Party Services
- Supabase: database and authentication infrastructure. Data stored in EU-West region (Ireland). Supabase Privacy Policy
- Vercel: hosting and CDN. Vercel Privacy Policy
- Google Analytics: usage analytics. You can opt out via Google Analytics Opt-out
- NOWPayments: cryptocurrency payment processing. NOWPayments Privacy Policy
- ipapi.co: used by the IP Lookup tool to resolve IP addresses. Your IP is sent to their API when you use that specific tool. ipapi.co Privacy
Your Rights
Depending on your location, you may have rights including:
- Access: request a copy of data we hold about you
- Correction: update inaccurate personal data
- Deletion: request deletion of your account and associated data
- Portability: receive your data in a machine-readable format
- Objection: opt out of analytics collection
To exercise any of these rights, contact us. We will respond within 30 days.
Cookies
We use cookies for:
- Authentication: a secure session cookie to keep you signed in
- Theme preference: to remember your light/dark mode choice
- Analytics: Google Analytics cookies to measure aggregate usage
We do not use advertising cookies or sell data to advertisers.
Children's Privacy
DevTools is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
Changes to This Policy
We may update this policy occasionally. We will notify signed-in users of material changes via the notification system. Continued use of the service after changes constitutes acceptance.
Contact
For privacy questions or data requests, use our contact form or email us directly. We aim to respond within 5 business days.