Who is responsible
Sofiane Łaba, operating under the Devmoire name, is the controller of the personal data described here.
Postal address: Leśmiana 9/29, 80-280 Gdańsk, Poland.
Privacy questions and requests can be sent to privacy@devmoire.com.
What is collected now
Newsletter information
Brevo receives your email address and records the double-opt-in process, including the submission, confirmation email, confirmation or non-confirmation, unsubscribe status, and relevant timestamps. Before you confirm, the address and confirmation attempt can temporarily appear in Brevo event and transactional logs even though the address is not yet an active newsletter contact. Devmoire does not copy the newsletter address into its application database.
Form security information
To limit automated abuse, Devmoire creates keyed hashes from the submitted email address and network address. The application stores only the hash, rate-limit window, request count, and expiry time—not the raw network address in the rate-limit record.
Providing an email address is voluntary, but it is necessary if you want to receive the newsletter.
Why it is used
- Newsletter delivery and list management: your consent under Article 6(1)(a) GDPR and the consent required for email marketing under Polish electronic communications law.
- Consent and suppression records in Brevo: legal accountability obligations and Devmoire’s legitimate interest in demonstrating compliance and preventing messages after withdrawal.
- Rate limiting and security: Devmoire’s legitimate interest in protecting the form and website from abuse.
There is no profiling or automated decision-making that produces legal or similarly significant effects.
Who receives the data
When the launch newsletter is enabled, the current flow uses:
- Supabase only for short-lived pseudonymous rate-limit records used to protect the form. Newsletter addresses are not stored there.
- Brevo to send the confirmation email, maintain the newsletter list, and process unsubscribe requests.
- OVHcloud to host the website on a virtual server in Warsaw, Poland, and process the technical data needed to operate and secure that infrastructure.
Brevo is configured to track opens and clicks only when a contact has separately given tracking consent. Devmoire does not request that consent on the pre-launch form, and contacts whose tracking consent is unknown are not tracked.
Providers may use approved subprocessors or support services outside the EEA. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses, or another lawful safeguard. You may contact privacy@devmoire.com to request information about the safeguard relevant to your data and how to obtain a copy where available.
How long it is kept
- Brevo's confirmation link expires after 30 days. If you do not confirm, your address is not added to the active newsletter contact list, although the unsuccessful attempt can remain temporarily in Brevo's event and transactional records.
- Brevo is configured to delete transactional email logs automatically after one month and never store email previews. This applies whether or not you confirm. Event records are kept only while needed for double-opt-in evidence, abuse prevention, and compliance, and can be removed earlier when no longer needed.
- An active subscriber record is kept in Brevo until you withdraw consent, the newsletter ends, or the address is removed for another valid reason.
- After withdrawal, only the minimum suppression information needed to prevent further marketing and meet applicable accountability requirements is kept. You may also request deletion under the rights described below.
- Rate-limit records are assigned short expiry windows of no more than 48 hours and expired entries are removed by routine limiter cleanup.
- Devmoire's website access logs contain connection details such as network address, time, request path, response status, and browser information. They rotate daily and are deleted after no more than seven days.
- OVHcloud may keep separate infrastructure, account, security, and event records under its published policies, contract, and applicable legal obligations. Those provider-side periods are set by OVHcloud and are not controlled through the Devmoire application.
Your choices and rights
You may ask to access, correct, delete, or restrict your personal data, receive it in a portable format where applicable, and object to processing where applicable. You may withdraw newsletter consent at any time without affecting earlier lawful processing.
Use the unsubscribe link in any newsletter email or contact privacy@devmoire.com. Withdrawal does not require an account, explanation, or payment.
You may complain to the President of the Polish Personal Data Protection Office (UODO) or another competent supervisory authority.
Cookies and device access
The pre-launch landing page does not use advertising or analytics cookies and does not load a third-party audience-measurement script. The short-lived website access logs described above are used only to operate and secure the service. Non-essential tracking will not be added without updating this notice and obtaining consent where required.
The future application
Public accounts, projects, Moire AI, billing, and paid subscriptions are not currently available through this website. No project, AI prompt, or payment data is collected through the launch newsletter. This notice will be replaced or expanded before those features open publicly.