HeartDEV Privacy Policy

Effective Date: September 22, 2026
Last Updated: October 8, 2026

At a glance

HeartDEV LLC operates heartdev.dev as an informational, promotional, and portfolio website. We do not sell products directly through the site, do not offer user accounts, and do not use advertising pixels or retargeting networks.

We may receive information you choose to submit through our contact forms. Cloudflare Workers Static Assets may process technical data needed to deliver and protect the site. Google Analytics 4 will only be activated after analytics consent where consent is required. You may withdraw analytics consent through the site’s privacy settings.

Privacy or data-protection questions: contact@heartdev.dev.

1. Who we are

The website operator is:

HeartDEV LLC
Registered/legal address: 30 N Gould St Ste N
Sheridan, WY 82801
United States
Website: https://heartdev.dev
Privacy / legal: contact@heartdev.dev

HeartDEV LLC is organized in the State of Wyoming, United States.

2. Scope

This Policy covers processing associated with heartdev.dev.

It does not govern the independent practices of:

Steam, itch.io, Google Play, Meta, or other external stores/platforms;
YouTube, Discord, or other third-party services;
future HeartDEV games or tools that publish their own privacy notices.

If a HeartDEV game later includes accounts, synchronization, ads, network services, telemetry, or similar features requiring a title-specific notice, HeartDEV may publish a separate policy or addendum.

2A. Corporate website vs. digital products

This Policy primarily describes processing performed by the corporate website.

HeartDEV games, applications, developer tools, plugins, and other software may have different technical practices depending on the product and platform. Before releasing a product that uses SDKs, analytics, advertising, accounts, cloud saves, multiplayer, in-app purchases, device permissions, or other network services, HeartDEV will conduct a product-specific audit.

Where needed, the product will receive its own public privacy URL, for example:

/legal/products/{product-slug}/privacy/

The product policy must match:

the software’s actual behavior;
its SDKs and permissions;
store declarations;
Google Play Data Safety disclosures where applicable;
any in-app disclosure.

The corporate policy must never be used to obscure or generalize data practices that belong to a specific product.

3. Information we may process

3.1 Information you provide

Our forms may request:

name;
email address;
subject;
message.

General, legal, privacy, and copyright communications are directed to contact@heartdev.dev.

Collaboration, partnership, and administrative proposals may be directed to admin@heartdev.dev.

Please do not submit sensitive information that is unnecessary for your request.

3.2 Hosting technical data

The site is hosted through Cloudflare Workers Static Assets. When delivering requests over its network, Cloudflare may process technical data such as IP addresses, routing data, and other information about traffic to provide and protect the service. See Cloudflare’s Privacy Policy for more information. HeartDEV does not maintain its own website-access log database.

3.3 Local preferences

We use browser local storage for consent and reduced-motion preferences, and session storage for the music player and page transitions. These preferences are not advertising identifiers. See the Cookie & Storage Policy for keys, purposes and duration.

3.4 Optional analytics

If you accept analytics, we may activate Google Analytics 4 (“GA4”).

GA4 may process technical information such as:

browser/cookie identifiers;
pages and events viewed;
session statistics;
browser and device information;
approximate geographic location derived technically;
traffic source/referrer.

HeartDEV does not use GA4 to build its own advertising profiles and does not deploy Meta Pixel or other advertising pixels at this stage.

4. Purposes and legal bases

Depending on your location and applicable law, we process information for:

Communications

To receive, manage, and answer inquiries, support requests, proposals, and other communications. The legal basis may include steps requested by you, contractual/pre-contractual purposes, or our legitimate interest in communicating with users and partners.

Security and operation

To protect the integrity, availability, and security of the site and infrastructure. This may rely on legitimate interests and applicable legal obligations.

Essential preferences

To remember functionality and your privacy choices. Strictly necessary storage does not require consent where applicable law provides an exemption.

Analytics

GA4 is activated only after analytics consent where such consent is required. You may withdraw that choice at any time.

5. Forms and Web3Forms

HeartDEV uses Web3Forms as the website’s form processor.

When you submit a form:

form data is transmitted to Web3Forms;
Web3Forms processes the submission for delivery to HeartDEV’s configured email;
HeartDEV receives the message in the appropriate mailbox.

Web3Forms operates infrastructure in the United States and publishes its own privacy and retention practices. Those practices may change, so its current policy and documentation also govern processing performed by that provider.

HeartDEV does not use form submissions to create advertising profiles.

Opening the contact form loads hCaptcha to help prevent automated submissions. The provider may process your IP address, browser and device information, and challenge interactions for security purposes. See the hCaptcha Privacy Policy. This security check does not enable website analytics.

6. Google Analytics 4

GA4 will be configured not to load before analytics consent through a prior-consent approach.

After consent, GA4 may create first-party cookies such as _ga and _ga_<id> to distinguish users and maintain session state.

HeartDEV intends to configure GA4 user/event retention to 14 months. Aggregated reporting may be subject to different Google retention rules.

You may reject analytics without losing access to the site’s primary content.

7. Cookies and similar technologies

See our Cookie & Storage Policy for categories, purposes, and controls.

In summary:

strictly necessary preferences may operate without consent where permitted;
analytics is optional;
third-party media/widgets that use external technologies will be loaded in a controlled manner where appropriate.

8. Third-party services

We may use or link to services including:

Cloudflare Workers Static Assets — website hosting and delivery;
Web3Forms — form processing;
Google Analytics 4 — optional analytics;
YouTube — video, preferably through Privacy-Enhanced Mode (youtube-nocookie.com);
Steam, itch.io, and Google Play — external distribution pages;
Discord — community links;
technical web-resource providers where needed.

HeartDEV self-hosts website fonts and essential static libraries where reasonably possible to reduce unnecessary third-party requests.

Each third-party service maintains its own terms and privacy practices.

9. International transfers

HeartDEV is a Wyoming company and uses service providers that may process data in the United States or other countries.

Where an international transfer is subject to GDPR, UK GDPR, or similar law, the transfer will rely on an applicable lawful mechanism used by HeartDEV and/or the relevant provider where required.

10. Retention

Messages

We keep communications only as long as reasonably necessary to manage the request, support matter, or relevant relationship, generally no more than 24 months, unless law, dispute defense, or an ongoing contractual relationship requires longer.

Resolved communications are periodically removed.

Local preferences

These remain until you change them or clear browser/site data.

Analytics

The planned GA4 user/event retention setting is 14 months, subject to the actual property configuration and Google’s own rules.

11. Security

We use reasonable measures designed to protect information from unauthorized access, loss, use, or alteration.

No Internet-connected system can guarantee absolute security.

12. Children

The site is a general-audience website and is not specifically directed to children under 13.

HeartDEV does not seek to knowingly collect personal information from children under 13 through this website. If we learn that such information was received in circumstances requiring parental consent or other action, we may delete it and take appropriate steps.

A parent or guardian may contact contact@heartdev.dev.

13. Privacy rights

Depending on your jurisdiction, you may have rights including:

access;
correction;
deletion;
restriction;
objection;
portability;
withdrawal of consent.

Requests may be sent to contact@heartdev.dev.

We may request reasonable information to verify a request.

EEA / European Union / United Kingdom

Where GDPR or UK GDPR applies, you may also:

withdraw consent without affecting prior lawful processing;
object to certain legitimate-interest processing;
lodge a complaint with your competent data-protection authority.

California

HeartDEV does not represent that it currently meets the statutory thresholds that would make it a “business” subject to CCPA/CPRA.

If those laws become applicable, HeartDEV will comply with the obligations that apply. At this stage HeartDEV does not sell personal information or share personal information for cross-context behavioral advertising.

14. External links and stores

If you follow a link to Steam, itch.io, Google Play, Discord, YouTube, or another external service, you may leave HeartDEV’s controlled environment or activate third-party content.

Those services operate under their own terms and privacy policies.

HeartDEV does not directly process store payments.

15. Changes

We may revise this Policy when our practices, vendors, features, or legal obligations change.

The current version will display its update date.

16. Contact

HeartDEV LLC
Registered/legal address: 30 N Gould St Ste N
Sheridan, WY 82801, USA

Privacy, legal, copyright, and general contact:
contact@heartdev.dev

Collaborations, partnerships, and administrative contact:
admin@heartdev.dev

Interface preferences

heartdev-language stores your chosen language (English on the first visit). heartdev-ui-sounds stores whether interface sounds are enabled. Both use localStorage on your device and remain until you change them or clear browser storage. Sounds are synthesized locally after interaction; no audio data is sent to a third party. These preferences do not enable analytics.