Privacy & Data Processing
This page describes how DevGhost handles contributor data in public analytics, what we collect when you submit a support ticket, who processes that data, and how to request export or deletion.
Public analytics & anonymization
Public (unauthenticated) analytics pages — the /explore catalog and repository pages at /p/… — show contributors under anonymized labels such as “Dev A1B2”, not their real names, emails, avatars, logins, or profile links.
Only a service administrator can publish a repository to public access. Identifiable, named analytics about a contributor appears publicly only where that developer has opted in themselves — for example, on a self-created developer profile. Private share links (token URLs) reveal real names only to the people the repository owner shares the link with; these pages are not indexed, but anyone holding the link can view them.
You may request access, removal, or to object to the processing of your data — email support@mail.devghost.pro.
Data processors
| Recipient | Data shared | Purpose | Retention |
|---|---|---|---|
| Resend (US) | Reporter email, subject, message body | Deliver transactional email | 30 days (Resend email log retention) |
| Telegram (Bot API) | Subject, reporter email, ticket link | Notify admin of new tickets | Retained by Telegram inside the admin chat (indefinite) |
| Vercel Blob (US/EU edge) | Files you attach to a ticket | Store ticket attachments | Until ticket is deleted or attachments are purged |
| Upstash Redis (regional) | Reporter IP (rate-limit key) | Anti-spam throttling | Up to 24 hours (TTL) |
| Hetzner Postgres (DE) | Full ticket record (subject, body, email, optional diagnostic context) | Primary support database | Retained indefinitely; deletion on request |
| Google Analytics 4 (Google, US) | Page views, device & browser, approximate location, _ga cookie ID | Aggregate site & product analytics | Up to 14 months (GA4 retention setting) |
| Yandex Metrica (Yandex, RU) | Page views, device & browser, approximate location, click maps, and Session Replay (Webvisor) recordings of on-page behavior | Aggregate site analytics & behavior insight | Retained per Yandex Metrica & Webvisor settings |
Purposes
- Resolve the issue or question you submitted
- Reproduce and debug technical problems
- Anti-spam protection on the submission endpoint
Legal basis
| Surface | Legal basis |
|---|---|
| Ticket record + rate-limit | Legitimate interest (operating a support channel and protecting the service from abuse) |
| Diagnostic context (page URL, browser, Accept-Language, JSON context) | Explicit consent (opt-in checkbox in the support form) |
Your rights
You can request export or deletion of your support tickets and related processor records. Email support@mail.devghost.pro with subject "GDPR: export" or "GDPR: delete" from the same address you used in the ticket.