Privacy Policy
Last updated: June 2026
This policy explains what information MES-DEV collects when you visit mes-dev.com, use our applications, or contact us — and exactly what we do with it.
The short version
- ✓ We collect only what we need to run the service — your name, email, and what you do on the site.
- ✓ We never sell your data or share it with advertisers.
- ✓ Payments are handled entirely by Lemon Squeezy — we never see or store your card details.
- ✓ You can request a copy of your data or ask us to delete your account at any time.
- ✓ We use Cloudflare Turnstile for spam protection — it sets no tracking cookies.
1. Who we are
MES-DEV ("we", "us", or "our") is a software development studio. We build and distribute desktop and web applications through our website at mes-dev.com.
For any privacy-related questions you can reach us at contact@mes-dev.com.
2. Information we collect
Account information
When you create an account we collect your full name, username, email address, password (stored as a one-way hash — we never see your plain-text password), and optionally your country. This information is used to identify you across sessions and to associate your downloads, reviews, and customization requests with your account.
Contact form
When you send us a message we collect your name, email address, subject, message body, and priority category (general / bug report / partnership). We use this solely to read and reply to your message. Contact submissions are stored in our database so we can track open threads and mark them as resolved.
Custom development requests
If you submit a custom development request, we collect your name, email, company (optional), request type, description, budget range, deadline (optional), and any file attachment you choose to upload. This information is used exclusively to assess and respond to your project enquiry.
Download activity
When you download one of our applications (requires a free account), we log the application downloaded and the timestamp. This helps us understand which tools are most useful and powers the download counter shown on each app page. We do not log your IP address in the downloads table.
Reviews
If you leave a review for an application, we store your rating, title, and comment linked to your account. Reviews marked as approved are shown publicly on the app page alongside your display name. You can request deletion of your review at any time by contacting us.
Usage and analytics data
We use Google Analytics to understand how visitors navigate the site (pages visited, time on page, referral source, approximate location at country level). Google Analytics uses cookies and may process your IP address. You can opt out via the Google Analytics opt-out browser add-on.
License validation
Our desktop applications validate premium licenses against our license server at api.mes-dev.com. During validation the application sends your license key and application slug. No personal identifiable data beyond the license key is transmitted during this check.
3. How we use your information
We use the information we collect for the following purposes only:
- To operate and improve mes-dev.com and our applications.
- To authenticate you and keep your account secure.
- To fulfill download requests and track download statistics.
- To reply to your contact messages and customization enquiries.
- To moderate and display reviews.
- To validate premium software licenses.
- To send transactional emails (e.g. password reset, email verification). We do not send marketing emails unless you explicitly opt in.
- To detect and prevent spam and abuse using our honeypot and CAPTCHA systems.
- To understand aggregate usage patterns via Google Analytics.
4. Third-party services
We rely on the following third parties to deliver parts of our service. Each operates under its own privacy policy.
| Service | Purpose | Data shared |
|---|---|---|
| Lemon Squeezy | Payment processing for premium licenses | Name, email, billing address, payment details (card data never reaches our servers) |
| Google Analytics | Website usage analytics | Anonymised browsing data, approximate location, device type |
| Cloudflare Turnstile | Spam and bot protection on forms | Browser signals only — no personal data, no tracking cookies |
5. Cookies
We use a minimal set of cookies required to operate the website:
| Cookie | Type | Purpose |
|---|---|---|
| mes_dev_session | Essential | Keeps you logged in and maintains form state |
| XSRF-TOKEN | Essential | Protects against cross-site request forgery attacks |
| _ga, _ga_* | Analytics | Google Analytics visitor identification (2-year expiry) |
Cloudflare Turnstile does not set any persistent cookies. The two essential cookies above are required for the site to function and cannot be disabled while using an account.
6. Data retention
We keep your data for as long as your account is active or as needed to provide our services:
- Account data Retained until you delete your account or request deletion.
- Contact messages Retained for 2 years to maintain a record of support history, then deleted.
- Custom development requests Retained for 3 years for business record purposes, then deleted.
- Download logs Retained indefinitely in aggregate anonymised form for statistics.
- Reviews Retained until you request deletion or your account is deleted.
- Payment records Retained by Lemon Squeezy per their legal obligations. We retain only the license key and purchase reference.
7. Security
We take reasonable precautions to protect your information:
- All data is transmitted over HTTPS/TLS.
- Passwords are hashed using bcrypt — we cannot recover your plain-text password.
- Admin access is restricted by role-based access control.
- File uploads are validated, stored outside the web root, and served through controlled routes.
- Forms are protected against CSRF, spam bots (honeypot + time-trap), and brute-force (rate limiting).
No system is perfectly secure. If you discover a security issue, please report it to contact@mes-dev.com and we will respond promptly.
8. Your rights
Regardless of where you are located, you have the following rights over your personal data:
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Ask us to delete your account and associated personal data.
Receive your data in a commonly used, machine-readable format.
Object to how we process your data in certain circumstances.
Ask us to restrict processing while a dispute is resolved.
To exercise any of these rights, email us at contact@mes-dev.com. We will respond within 30 days. We may ask you to verify your identity before acting on a request.
You can also delete your account directly from your profile page — this removes your personal data from our active database.
9. Children's privacy
MES-DEV Tools is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. Continued use of the site after changes are posted constitutes acceptance of the revised policy. For major changes that affect how we use personal data, we will notify registered users by email.
Questions about this policy?
If you have any questions or concerns about how we handle your data, we're happy to help.