Privacy Policy
Last updated: July 27, 2026
This policy explains how Devs 3.0 processes the personal data of people using devs30.com, including newsletter subscribers, account holders, event attendees and people contacting us on business matters. devs30.com also acts as the identity provider for the other services in the Devs 3.0 ecosystem.
Data controller
The data controller is IT-OPES Usługi Informatyczne, NIP PL5291686297. For matters concerning personal data, contact us at .
What data we collect
When you subscribe to the newsletter we collect your email address. When you create an account we collect your email address, display name, optionally your first and last name and your time zone. When you sign up for an event we collect your email address. When you send a business inquiry we collect your first and last name, email address, optionally company name and phone number, company size and the content of your message. For every sign-in session we record the IP address and browser information.
Purpose and legal basis
We process the newsletter email address solely to send the newsletter, based on your consent (Art. 6(1)(a) GDPR). We process account data to provide the account, the user dashboard and sign-in to the ecosystem services, based on contract performance (Art. 6(1)(b) GDPR). We process event signups based on your consent confirmed via double opt-in (Art. 6(1)(a) GDPR). We process business inquiries to answer them and prepare an offer, based on your consent and our legitimate interest (Art. 6(1)(a) and (f) GDPR). We collect traffic statistics based on your consent (Art. 6(1)(a) GDPR). We process the IP address, browser information, the anti-bot check and request limits on the basis of our legitimate interest in the security of the service (Art. 6(1)(f) GDPR).
User account
When you maintain an account we process your email address, display name, optionally your first and last name, timezone, and records of login sessions and terms acceptance. For every session we record the IP address and browser information in order to protect the account and detect unauthorized access. We process this data to provide the account and the user dashboard, based on contract performance (Art. 6(1)(b) GDPR). We keep the data until the account is deleted, which irreversibly anonymizes personal data.
Signing in with Google and GitHub
When you choose to sign in with Google or GitHub, the provider shares the account identifier, email address and name with us. Devs 3.0 stores only the link to that identifier, the email address and the name, without any passwords held by the provider. Login tokens are not retained beyond the login process itself.
Single sign-on across the Devs 3.0 ecosystem
Your Devs 3.0 account is also used to sign in to the other services in the ecosystem, that is Soft 3.0, Skills 3.0, Challenges 3.0 and Devs 3.0 Community. All of these services are run by the same data controller. After sign-in we pass your account identifier, email address and name to the chosen service, which opens its own session. A global sign-out invalidates the sessions in all services at once. An account deletion at devs30.com is propagated to every service in the ecosystem, where it irreversibly anonymizes personal data.
Newsletter
We use the email address stored for the newsletter solely to send the messages covered by your consent. You confirm consent via double opt-in and can withdraw it at any time using the link in the footer of every message.
Event signups
When you sign up for a webinar or another event we collect your email address and send you a message asking you to confirm the signup. We use the address to send you the event link and reminders about it. We anonymize signups 90 days after the event start date, keeping only the number of registrations.
Business inquiries
The business contact form collects your first and last name, email address, optionally company name and phone number, company size and the content of your message. We use this data solely to answer your inquiry and prepare an offer. We do not add it to the newsletter. We anonymize the personal data from an inquiry after 365 days, keeping the fact of contact itself without identifying data.
The Devik assistant
If you use the Devik assistant available on our pages, your question is sent to Ollama Cloud, an external language model provider that processes it outside the European Economic Area. Before the question is sent we strip contact details and identifiers from it, meaning email addresses, phone numbers, national identification numbers, bank account and card numbers, IP addresses and personal names, replacing them with markers, and we restore them in the answer shown to you. This is a safeguard rather than a guarantee, because name recognition works automatically and can miss some. Please do not enter data in a conversation with the assistant that you do not want to share with us. We do not store assistant conversations in our database. Before a question is sent we ask you to pass an anti-bot check, and we limit the number of requests based on your IP address.
Cookies and analytics
The site uses cookies that are necessary to run it, including a sign-in session cookie, temporary cookies for the sign-in flow, a cookie that stores your cookie choice, and a cookie that stores your language. These necessary cookies do not require consent. The site also uses Google Analytics 4 to measure traffic and visit statistics. We collect statistics only after you consent to cookies (art. 6(1)(a) GDPR). Until you consent, analytics runs without cookies. Data may be processed by Google outside the European Economic Area. You can withdraw consent at any time via the Manage cookies link in the footer.
Processors
We use the provider Resend (resend.com) to send messages. We use Google Analytics 4 (Google Ireland Limited) to measure site traffic. External sign-in is handled by Google and GitHub. Answers from the Devik assistant are generated by Ollama Cloud, an external language model provider. The other services in the Devs 3.0 ecosystem and our internal protection service operate under the same data controller and are not separate recipients of your data. We share data with these parties solely for the described purposes. Some of these providers, including Resend, Google and GitHub, may process data outside the European Economic Area on the basis of the European Commission standard contractual clauses. Questions sent to the Devik assistant are also processed outside the European Economic Area.
Retention period
We keep the newsletter email address until you withdraw consent or unsubscribe, after which we remove it from the list. We keep account data until the account is deleted. We anonymize event signups 90 days after the event start date. We anonymize the personal data from business inquiries after 365 days. We anonymize sign-in session records together with the account deletion. We keep your analytics consent until you withdraw it.
Your rights
You have the right to access, rectify, erase, restrict, and port your data, and to withdraw consent. You delete your account yourself in the account settings, and the deletion covers the other services in the Devs 3.0 ecosystem as well. We do not offer an automated data export yet, so we provide a copy of your data on request sent to the address below. You also have the right to lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office (PUODO). To exercise these rights, write to .