Privacy Policy

What we collect

When you create an account, we collect your name, email address, and a hashed password (we never store your password in plain text). To keep you signed in, we set a session cookie. We also store the content you choose to add — your profile, projects, and anything you post.

To be fully transparent: some developer profiles on Carib Devs were seeded from public GitHub data so the directory wasn’t empty on day one. For those profiles we may have stored the public display name, GitHub handle, avatar image, public repositories, bio, and location — all of which were already publicly visible on GitHub. We did not collect private repositories, email addresses, or anything behind a login. If one of these profiles is yours, you are in control of it (see Your rights below).

How we use your information

We use your data only to run the marketplace: to operate the public directory, to authenticate you and keep your session secure, and to send transactional email — account verification, password resets, and important service notices — through Amazon Simple Email Service (SES). We do not use your data to build advertising profiles, and we don’t run behavioural ad tracking.

Cookies

We keep cookies to the bare minimum. We set one essential, httpOnly session cookie that signs you in, and a CSRF token used to protect form submissions from cross-site attacks. That’s it — no third-party advertising cookies, no cross-site trackers, and no analytics fingerprinting.

How we share data

We do not sell your personal data, and we never will. We share data only with the infrastructure providers needed to deliver the service, acting as our sub-processors: our hosting and database run on Hetzner (orchestrated with Coolify), and transactional email is delivered through Amazon Web Services (SES). We may also disclose information if required by law or to protect the safety and rights of our users.

Your rights

You can access and correct your account information at any time from your profile, and you can ask us to delete your account and associated data. If a profile that was seeded from public GitHub data belongs to you, you have a right to be forgotten: use our data removal page to have it taken down — no account required. Alternatively, you can claim the profile to take ownership and edit it yourself.

Security

Passwords are hashed with argon2, a modern, memory-hard algorithm, so we never hold your plain-text password. All traffic to Carib Devs is encrypted in transit over HTTPS. No system is perfectly secure, but we take reasonable measures to protect your data and limit access to it.

Data retention

We keep your account data for as long as your account is active. When you delete your account or a seeded profile is removed, we delete the associated personal data within a reasonable period, except where we’re required to retain certain records to comply with legal obligations.

Children

Carib Devs is not intended for anyone under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will remove it.

Changes to this policy

We may update this policy as the product evolves. When we make material changes, we will revise the date at the top of this page and, where appropriate, notify you directly.

Contact

Questions about your privacy or this policy? Reach us through our contact page and we’ll get back to you.