Last updated: 26 May 2026

Privacy & Terms

The plain version: we collect what you type into our contact form (and nothing else), we use it to write you back, we don't sell it, we don't share it with marketers, and we delete it when it's no longer useful to either of us. The longer version is below, because that's what the regulators want to see.

1. Who we are

This website is operated by Devmethink, Lda., registered in Portugal under NIPC 516302159 (VAT PT516302159), with registered office at R. Eng.º Guilherme Santos, Loja G, 3105-165 Pombal, Portugal. In this notice, “devmethink”, “we”, “us” and “our” refer to that entity. We are the data controller for the personal data described below.

For anything privacy-related you can reach us at info@devmethink.com. We have not appointed a Data Protection Officer because we are not required to under Article 37 GDPR; that contact address is monitored by the team directly.

2. What we collect

We collect the personal data you give us when you complete the contact form on this site. That is:

  • Your name
  • Your email address
  • A working title for your project
  • The service you're interested in (design, development, or both)
  • Your rough timeline
  • Whether our pricing floor aligns with your expectations

We do not run analytics, advertising pixels, fingerprinting, session recording, A/B testing, or any other passive collection on this site. We do not buy or enrich data about visitors from third parties. If that ever changes, this page changes first.

3. Why we collect it

We use your data for one purpose only: to read your message and write back to you about a possible engagement. We don't add you to a newsletter, we don't pass you to a sales tool, and we don't use what you tell us to train any AI model.

5. Who else sees it

We do not sell, rent, trade, or share your personal data.

We use a small number of service providers to actually run the site and reply to you. They process your data on our behalf, only on our instructions, and only for what's strictly needed:

  • Hostinger International, Ltd. — hosts this website and routes form submissions. Standard server logs (IP address, user agent, timestamp) are retained briefly for security and abuse prevention.
  • Google Ireland Ltd. (Google Workspace) — receives and stores the emails generated by your submission so we can read and respond to them.

We may disclose data if we are legally required to (court order, valid request from a competent authority, etc.) or if it's necessary to defend a legal claim. We'll push back on requests that look overbroad.

6. How long we keep it

We keep the contents of your inquiry for as long as it's useful to the conversation, and then for a reasonable archival window after it ends. As a rule of thumb:

  • If we don't end up working together: up to 24 months from the last message, then deleted.
  • If we do end up working together: for the duration of the engagement, plus the period legally required to retain commercial records under Portuguese law (currently 10 years under Article 123.º do CIRC for tax-relevant records).

You can ask us to delete your data earlier — see your rights below.

7. Your rights

If you are in the EU, EEA, UK or Switzerland, you have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data erased, where one of the grounds in Article 17 GDPR applies
  • Restrict how we process your data (Article 18 GDPR)
  • Receive your data in a portable format (Article 20 GDPR)
  • Object to processing based on legitimate interest (Article 21 GDPR)
  • Withdraw consent at any time, where processing is based on consent (this does not affect the lawfulness of processing before the withdrawal)

To exercise any of these, email us at info@devmethink.com. We'll respond within 30 days and usually much sooner. We may ask you to confirm your identity before acting on a request.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) — cnpd.pt. If you are in another EU/EEA Member State, you may also complain to your local supervisory authority.

8. California residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you specific rights. Most of the substance overlaps with what's already in section 7. Specifically, you have the right to:

  • Know what personal information we collect, use, and disclose about you
  • Have inaccurate personal information corrected
  • Delete personal information we hold about you
  • Limit our use of sensitive personal information (we don't currently process anything that falls into this category)
  • Opt out of the “sale” or “sharing” of your personal information — we do not sell or share personal information as those terms are defined under the CCPA, so there is nothing to opt out of
  • Not face discrimination for exercising any of these rights

To make a request, email info@devmethink.com. You may also use an authorized agent acting on your behalf, with appropriate written permission.

9. Cookies & local storage

This site does not set tracking cookies. We do use your browser's local storage to remember two preferences you set yourself:

  • Whether you prefer light or dark theme (stored by next-themes)
  • Whether you've muted the small interface sounds (stored under a key on this domain)

Neither value leaves your browser. Clearing your site data removes them. Because these are strictly necessary to remember the preferences you actively chose, no consent banner is required under ePrivacy / Article 5(3) of Directive 2002/58/EC.

Our hosting provider may set short-lived first-party cookies for security and load-balancing purposes (e.g. anti-bot challenges). These are also strictly necessary and are not used for analytics or advertising.

10. Security

We use TLS in transit, restrict access to mail and source systems to named team members with multi-factor authentication, and avoid standing copies of data on local machines. No system is perfectly secure; if a breach affecting your data occurs we will notify the CNPD within 72 hours where required (Article 33 GDPR), and notify you directly when the breach is likely to result in a high risk to your rights and freedoms (Article 34 GDPR).

11. Children

This site and our services are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted information through our contact form, please tell us and we will delete it.

12. International transfers

We are based in Portugal. Some of our service providers are established in the United States. Where personal data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) or, where applicable, an adequacy decision such as the EU–US Data Privacy Framework. You can request a copy of the safeguards we rely on at the contact address above.

13. Changes to this notice

We'll update this page when the way we handle data changes. The “Last updated” date at the top will move with it. For material changes, we'll do our best to flag it visibly on the home page for a reasonable period. We do not maintain a historical version archive; if you need an older version for a specific reason, write to us.

14. Terms of use

By using this site you accept the following. They are short on purpose.

14.1 The site, as is

We provide this site on an “as is” and “as available” basis. We make no warranties, express or implied, about the accuracy, completeness, fitness for any particular purpose, or non-infringement of the content shown here. Project descriptions and case studies are illustrative, not promises.

14.2 Intellectual property

The site, including its design, copy, source code, illustrations, and any other content owned by us, is protected by Portuguese and international copyright and trademark law. You may view it, reference it, and link to it. You may not copy, reproduce, redistribute, or create derivative works from it without our written permission, except as permitted by law.

Third-party trademarks shown in case studies belong to their respective owners and are used only to identify the projects they relate to.

14.3 Acceptable use

Don't attempt to break, probe, scrape at scale, or otherwise misuse the site. Don't submit content that infringes third-party rights, is unlawful, or is intended to mislead us about who you are. We may refuse, suspend or terminate access for any of these reasons.

14.4 Limitation of liability

To the maximum extent permitted by Portuguese law, we are not liable for any indirect, incidental, consequential or special damages arising out of or in connection with your use of this site. Nothing in these terms limits liability that cannot be limited under applicable law (including liability for gross negligence, wilful misconduct, or personal injury caused by negligence).

14.5 Governing law and forum

These terms and this notice are governed by the laws of Portugal, without regard to its conflict-of-laws rules. For consumer disputes, you keep the protections of the mandatory rules of the country where you habitually reside. Subject to that, the Portuguese courts in the judicial district of Leiria have exclusive jurisdiction.

Consumers in Portugal may also use the official alternative dispute resolution channels listed at consumidor.gov.pt and, for online disputes, the EU's ODR platform at ec.europa.eu/consumers/odr.

15. Contact

For anything related to this notice, your data, or the terms above, write to info@devmethink.com. For everything else, the contact form is the front door.