Privacy Policy

This page explains what information this website collects, why it is collected, how long it stays and how to have it removed. It is short by the standards of privacy policies, mostly because the site collects very little: an email address if you subscribe, a message if you write, and a small amount of technical data that is hashed before it is stored.

1. Who is responsible for your data

This website is published and run by App Developer, an independent software development practice. That business is the data controller for everything described on this page, which in practice means one person decides what happens to your information and one person answers for it.

The fastest route for any privacy question, correction or deletion request is contact@expertappdeveloper.com. There is no privacy portal and no ticket queue, and a real reply usually arrives within a working day.

2. The short version

If you read nothing else on this page, read these six lines. Everything below simply expands on them:

• Nothing is sold. Your data is never sold, rented, or handed to a data broker or an advertising network.
• IP addresses are hashed. They are turned into a one way fingerprint before being saved, so the raw address is never stored in the database.
• No advertising trackers. There are no advertising pixels, no cross site profiling and no social media tracking scripts on this site.
• The tools stay on your device. The free online tools run in your browser, so what you type into them never reaches our server.
• You can delete everything. One email removes your data, usually the same day, and always within 30 days.
• One tracking cookie exists. A 60 day referral cookie, and only if you arrive through an affiliate link.

3. What we collect

Information you give us on purpose

Nothing in this group is collected unless you type it into a form and press send:

• Contact form — your name, your email address, the subject, and the message itself.
• Newsletter — your email address, your name if you provide one, and which page you subscribed from.
• Job applications — everything you enter on the careers form, including your location, the role, the link you share and what you write about yourself.
• Project enquiries — anything you choose to include about your product, your budget or your deadline while we are discussing work.

Every one of these is optional. You can read every article and use every tool on this site without ever telling us your name.

Information collected automatically

A small amount of technical data is recorded when a form is submitted or when an affiliate link brings you here:

• A hashed IP address — your IP address is turned into an irreversible fingerprint before anything is written down, and the address itself never reaches the database. The fingerprint is used for spam and abuse control, it cannot be turned back into your address, and it is of no use to anyone trying to identify you elsewhere.
• A hashed browser signature — your browser's user agent string is stored the same irreversible way, and is used for one narrow purpose: telling two visits apart so an affiliate referral is credited to the right partner.
• The page you were on — the path of the page where a form was submitted or a referral link landed, plus the referring site if your browser sent one.
• Standard server logs — kept by the hosting provider for security and diagnostics, and rotated on their schedule rather than kept indefinitely by us.

What we deliberately do not collect

Some things are easy to collect and are not collected here, which is worth stating explicitly rather than leaving to inference:

• Raw IP addresses in the application database.
• Advertising identifiers, cross site profiles, or anything shared with an ad network.
• Payment card details — invoices are settled through bank transfer or a payment provider that handles the card data itself, so card numbers never touch this site.
• Special category data such as health, religion, political opinion or biometric information. Please do not put any of it in a form here.
• The contents of files or text you process with the free online tools.

4. Why we use it

Each piece of information has one job, and it is not reused for a second purpose without asking you first:

• To reply to your message, quote your project and keep a record of what was agreed.
• To send the newsletter you asked for, and nothing else in the same envelope.
• To read your job application, reply to it, and read it again when a matching role opens.
• To credit the right affiliate partner when a referral turns into a client.
• To detect spam, rate limit abusive traffic and keep the forms usable for everyone.
• To understand which articles are worth writing more of, using aggregated figures rather than individual behaviour.
• To meet legal and accounting obligations, which for invoices means keeping records for as long as tax law requires.

Your information is never used to build a profile of you, and it is never fed into an advertising system.

5. The legal basis for using it

For readers in the United Kingdom, the European Economic Area and anywhere with comparable law, these are the grounds we rely on:

• Consent — the newsletter. You gave it by subscribing and can withdraw it in one click from any issue.
• Performance of a contract — quoting, delivering and invoicing a project you have hired us for.
• Steps taken at your request before a contract — answering an enquiry, preparing a proposal, reviewing a job application.
• Legitimate interests — keeping the site secure, preventing spam, attributing affiliate referrals correctly, and understanding in aggregate which content is read. These are balanced against your rights, which is precisely why identifiers are hashed rather than stored raw.
• Legal obligation — retaining invoices and related records for the period tax law requires.

6. Cookies and local storage

This site uses very few cookies, and none of them are for advertising:

• Session and security cookies — set by the application to keep forms working and to protect against cross site request forgery. They are essential, they expire when you close the browser or shortly after, and the site cannot function without them.
• The referral cookie — a single attribution cookie, set only if you arrive through an affiliate link, and explained in the next section.
• Local storage — occasionally used by a tool to remember your last settings so you do not have to set them again. It stays on your device and is never transmitted.

There is no consent banner because there is nothing here to consent to beyond the essentials and one attribution cookie. If advertising or third party analytics are ever added, a banner will appear before a single non essential cookie is set, and this page will be updated on the same day.

You can block or clear cookies in your browser settings at any time. Blocking the essential ones will break form submission; blocking the referral one only means a partner does not get credited.

7. The affiliate referral cookie, in detail

When somebody promotes this site through the affiliate programme, their link carries a partner code. Arriving on such a link sets a referral cookie for 60 days so that a partner is still credited if you come back a month later and become a client. The cookie holds the partner code and nothing else — no name, no email, no browsing history.

Alongside it, a single record is stored noting which partner sent you, the page you landed on, the referring site, and the two hashes described above. The purpose is narrow and financial: making sure the right person gets paid. Partners see visit and lead counts for their own link, never who you are.

If you would rather not be counted, clear the cookie or open the site in a private window. Nothing about your experience changes either way.

8. The free online tools

Almost every tool published here runs entirely inside your browser. The calculation happens on your own machine in JavaScript, which means the numbers you type, the text you paste and the files you open never travel to our server. There is no upload, no queue and no copy of your file sitting in temporary storage waiting to be cleaned up. Nothing is stored because nothing arrives.

Where a tool genuinely needs a server to do its work, the tool page says so before you use it, explains what is sent and states how quickly it is deleted. If a tool page says nothing about uploading, it does not upload.

9. How long things are kept

Nothing is kept forever by default. These are the actual periods:

• Newsletter subscriptions — until you unsubscribe. The address is then kept in an unsubscribed state so we do not accidentally add you back, or erased completely on request.
• Contact messages — up to 12 months after the conversation is finished, then deleted.
• Job applications — 12 months from the day you apply, so they can be reconsidered when a seat opens, then deleted.
• Client project records — for the life of the engagement plus the period accounting and tax rules require for invoices.
• Referral visit and lead records — kept while the affiliate relationship is active and for one commission cycle after it ends.
• Server logs — held briefly by the hosting provider on their rotation schedule, not archived by us.

Any of these can be shortened on request. Ask for deletion and it happens, unless a specific invoice has to be retained for tax purposes, in which case we will tell you exactly what remains and why.

10. Who else can see it

The site is run by one person, and the list of companies that touch your data is deliberately short:

• The hosting provider — stores the database and the application, and therefore technically holds anything you submit.
• The email provider — delivers the newsletter and carries the messages sent from the contact form to the inbox.
• Payment providers — used for client invoices, and they hold the payment details, not this website.

Each of these is bound by a contract to process data only on our instructions and never for their own purposes. No one else receives your information.

The only other circumstance is a legal one: where disclosure is genuinely required by law, or is necessary to protect the rights, property or safety of readers, clients or the business. That has never happened, and if a request ever arrives you will be told about it unless the law forbids it.

11. Where your data is stored

The business operates from outside the European Economic Area, and the service providers above may store data either inside or outside it. Where personal data leaves the EEA or the UK, it is protected by standard contractual clauses or an equivalent safeguard in the provider agreement. If you want to know precisely which providers are in use today, ask and you will get the current list.

12. Keeping it safe

The practical measures matter more than a paragraph promising to take security seriously, so here they are: the site is served over HTTPS, the admin area sits behind authentication with a strict content security policy, forms are rate limited to blunt automated abuse, identifiers are stored as irreversible hashes rather than as raw values, dependencies are patched on a schedule and backups are encrypted.

None of that makes any website absolutely secure, and anyone claiming otherwise is selling something. If a breach ever affects your personal data, you will be told what happened, what was exposed and what to do about it, within 72 hours of it being discovered.

13. Your rights over your data

Depending on where you live these rights may be statutory, but they are honoured for everybody here regardless of location:

• Access — ask what is held about you and receive a copy.
• Correction — have anything inaccurate or incomplete fixed.
• Deletion — have it erased, subject only to records that tax law requires us to keep.
• Restriction — ask that we hold data but stop using it while something is being resolved.
• Objection — object to processing based on legitimate interests, including affiliate attribution.
• Portability — receive your data in a structured, machine readable file.
• Withdrawing consent — unsubscribe at any time, with no effect on anything processed before you did.

To use any of them, write to contact@expertappdeveloper.com. No form, no template, no identity verification beyond replying from the address concerned. Requests are answered within 30 days and usually within one or two.

If you are unhappy with how a request was handled you can complain to your local data protection authority, but please raise it here first: a one person business can fix a mistake far faster than a regulator can.

14. Marketing and how to stop it

The newsletter is the only marketing sent from this site, and it goes only to people who asked for it. Every issue carries a one click unsubscribe link that works immediately, with no confirmation page and no attempt to talk you out of it. Sending a contact message or applying for a role does not subscribe you to anything, and no marketing is ever sent to an address given for another purpose.

15. Apps built for clients

This policy covers this website only. Mobile and web apps built for clients are operated by those clients and have their own privacy policies, some of which are hosted here at the request of the client for app store compliance. Where an app has its own policy page on this domain, that page governs the app, and this one governs the website you are reading now.

16. Children

This site is written for developers and business owners and is not directed at children. Personal information is not knowingly collected from anyone under 16. If you believe a child has submitted something through a form here, write to us and it will be deleted promptly and without argument.

17. Links to other websites

Articles link to documentation, repositories, tools and app store listings that we do not control. Once you follow a link you are on somebody else's terms and somebody else's privacy policy, and we have no visibility of what they collect. It is worth a glance at their policy before you type anything into their forms.

18. Changes to this policy

This policy is updated when the site changes or when the law does. The "Last updated" date at the top always reflects the current version. Where a change materially affects what is collected or why — adding analytics, for instance — subscribers are told by email before it takes effect rather than after.

19. Contact

Any question about this policy, any correction, and any request to see or delete what is held about you:

• Email: contact@expertappdeveloper.com
• Contact form: the contact page
• Related pages: Terms of Use and Refund Policy

Every message is read by the person who runs the site, and answered personally.