Overview
This Privacy Policy explains how Developer Paths ("we", "us", or "our"), operated by Digambar Chavan, collects, uses, discloses, and safeguards your information when you visit our website at https://developerpaths.dev (the "Service"). Please read this policy carefully. By using the Service, you consent to the practices described herein. If you do not agree with the terms of this policy, please do not access the Service.
Information We Collect
We collect information that you provide directly and information collected automatically:
- Account Information — When you sign up, we collect your full name and email address. Passwords are stored only as bcrypt hashes; we never store plaintext credentials.
- Profile Data — Your learning progress, completed roadmaps, quiz scores, checklist states, and preferences are stored so you can resume across sessions and devices.
- Contact Submissions — When you use our contact form, we store your name, email, subject, and message to respond and improve our service.
- Newsletter — If you opt in to our newsletter, we store your email address. You can unsubscribe at any time via the link in every email.
- Automatically Collected — We collect IP address, browser type, device information, pages visited, referring URL, and timestamps via server logs and Google Analytics (GA4). We do not fingerprint devices or use invasive tracking techniques.
How We Use Your Information
- To provide, operate, and maintain the Service and your user account
- To synchronize your learning progress across devices
- To send transactional emails: OTP verification codes, password-reset links, and account notifications
- To respond to your contact form inquiries within 24 hours
- To send newsletter content only when you have explicitly opted in
- To analyze usage trends, diagnose technical issues, and improve Service quality
- To protect against misuse, fraud, and unauthorized access
- To comply with legal obligations and enforce our Terms of Service
Third-Party Services
We use the following third-party services that may process your data under their own privacy policies:
- Vercel — Hosting and edge network for fast, global page delivery.
- MongoDB Atlas — Cloud database for storing user accounts and progress data (encrypted at rest, TLS in transit).
- Google Analytics (GA4) — Anonymous, aggregated usage metrics. IP anonymization is enabled. No advertising features are active.
- Nodemailer via Gmail SMTP — Transactional emails (OTPs, password resets, contact form confirmations).
- Cloudflare — DNS and DDoS protection (if enabled).
Data Retention
We retain your account data for as long as your account is active. If you delete your account, all personal data (profile, progress, preferences) is permanently removed from our database within 30 days. Contact form submissions are retained for 12 months for support reference and then purged. Analytics data is retained in Google Analytics for 14 months (the default GA4 retention period) and cannot be linked back to individual users.
Data Security
We implement industry-standard security measures to protect your data. Passwords are hashed with bcrypt (work factor 12). All data is transmitted over HTTPS/TLS 1.3 in production. Database access is restricted via IP allowlisting and role-based credentials. Environment secrets are stored encrypted and never committed to source control. Despite our best efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but will notify affected users of any breach within 72 hours as required by applicable law.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access — Request a copy of the personal data we hold about you.
- Rectification — Update or correct inaccurate information from your Dashboard or by contacting us.
- Deletion — Delete your account and all associated data at any time from your Dashboard settings.
- Portability — Request an export of your data in a machine-readable format.
- Objection — Object to processing of your data for specific purposes.
- Withdraw Consent — Withdraw consent for newsletter or analytics at any time without affecting prior processing.
International Data Transfers
Our Service is operated from India. If you access the Service from outside India, your data may be transferred to, stored, and processed in India or other countries where our service providers operate (including the United States for Vercel and Google). By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place, including reliance on Standard Contractual Clauses where applicable.
Children's Privacy
The Service is not intended for individuals under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal data from children. If we discover that a child has provided us with personal information, we will delete it immediately. If you believe a child has provided us with their data, please contact us.
Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. For material changes, we will notify registered users via email at least 7 days before the new policy takes effect. Continued use of the Service after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:Email: info@developerpaths.devPhone: +91 80805 34955Address: Diamond Complex, Near Bus Stand Road, Kannad, Chhatrapati Sambhajinagar (Aurangabad), Maharashtra, 431103
Have questions about your data?
We're happy to help — reach out any time.