Privacy Policy

1. Who We Are

Dozen Devs (“we”, “us”, or “our”) operates the website dozendevs.comand its associated services (the “Platform”). We are a community platform connecting Android app developers with human testers to help meet Google Play’s closed testing requirements.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. Please read it carefully. If you disagree with its terms, please discontinue use of the Platform.

2. Information We Collect

Information You Provide

• Account information: When you sign in via Google OAuth through Clerk, we receive your email address, display name, and profile picture URL.
• Screenshots: When you participate as a tester, you upload screenshots of apps you are testing. These images are stored securely.
• App information (developers): App name, package name, Play Store URL, app description, and icon when you list an app for testing.

Information Collected Automatically

• EXIF metadata: Screenshots you upload may contain embedded EXIF data including the date/time the photo was taken and the device model. We use this data solely to verify screenshot authenticity and prevent fraud.
• Usage data: Log data including your IP address, browser type, pages visited, and timestamps. This is processed by Cloudflare at the network edge.
• Cookies: Clerk (our authentication provider) sets authentication cookies necessary for session management. We also use cookies required for Google AdSense to serve relevant advertisements.

3. How We Use Your Information

• To create and manage your account on the Platform
• To verify that screenshots are authentic and taken on the correct date
• To detect and prevent duplicate or fraudulent screenshot submissions using perceptual hashing
• To calculate and credit Aura rewards to your account
• To display your ranking on the public leaderboard (display name and score only)
• To send transactional emails (e.g., verification results, account notices) via Resend
• To serve contextually relevant advertisements via Google AdSense
• To improve the Platform through aggregate, anonymised analytics

4. Third-Party Services

We rely on the following third-party services to operate the Platform. Each has its own privacy policy governing the data they process:

• Clerk — Authentication and user management. clerk.com/privacy
• Neon — PostgreSQL database hosting. neon.tech/privacy
• Cloudflare R2 — Screenshot storage. cloudflare.com/privacypolicy
• Google Cloud Vision — OCR text extraction from screenshots to verify app content. Images are processed transiently and not retained by Google. cloud.google.com/terms/cloud-privacy-notice
• Resend — Transactional email delivery. resend.com/privacy
• Upstash Redis — Background job queue. upstash.com/privacy
• Google AdSense — Advertising. Google may use cookies and device identifiers to serve personalised ads. policies.google.com/privacy
• Netlify — Frontend hosting and CDN. netlify.com/privacy
• Koyeb — Backend API and worker hosting. koyeb.com/legal/privacy

5. Cookies and Advertising

We use cookies for the following purposes:

• Strictly necessary: Authentication session cookies set by Clerk. These cannot be disabled without breaking the service.
• Advertising: Google AdSense may set cookies to serve personalised advertisements based on your interests. You can opt out of personalised advertising at adssettings.google.com.

By using the Platform, you consent to the placement of cookies on your device as described above.

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide services. Screenshots are retained for the duration of the testing assignment plus 30 days, after which they may be deleted from storage. Aura transaction records are retained for 2 years for accounting purposes.

You may request deletion of your account and associated data at any time by contacting us at the email below.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (“right to be forgotten”).
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Opt-out of sale (CCPA): We do not sell personal data. California residents may exercise additional rights under the CCPA.

To exercise any of these rights, contact us at privacy@dozendevs.com.

8. Children’s Privacy

The Platform is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Platform or by email. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us