Privacy notice
What DevSoftUK collects when you use DeviceCheck, why, and what you can ask us to do about it. Last updated 22 August 2026.
This page is not finished. The registered company details are not configured on this deployment. Set Portal:Company:* before using the site commercially.
Who is responsible
The operator of this site is the data controller. Contact details below.
What we collect, and why
| What | Why | Kept |
|---|---|---|
| Your name, work email and mobile number | To create your account, sign you in, and reach you about your plan — a failed payment or a card about to expire | While you have an account |
| Your company name and contact details | To identify whose plan and whose test reports are whose | While the account exists |
| Your password, as a PBKDF2-SHA256 hash | To sign you in. We never store it in clear and cannot read it | Until you change it |
| Sign-in records: time, IP address, browser | To detect and rate-limit password guessing against your account | While the account exists |
| A hardware fingerprint of each PC that runs DeviceCheck | To recognise a PC that has signed in before, so a re-install does not register a second one, and to show you which benches are in use. Stored as one-way hashes — we never hold your hardware serial numbers | Until the PC is released from the plan |
| Test reports your technicians save: device details, measurements, verdicts, photographs, and the name of the operator who signed off | They are your records of what you tested. We store them so you can read them back | Until you ask us to delete them |
Payments
Card payments are handled by Stripe. Card numbers are entered directly into Stripe's own form and never reach this site or our servers — we hold only Stripe's customer and subscription identifiers, and what you bought. Stripe is a separate controller for the payment itself; see stripe.com/privacy.
Where it is stored, and who can see it
On Microsoft Azure in the West Europe region. Only DevSoftUK staff who need it for support can see your account, and your test reports are visible only to people signed in to your own company’s account.
We do not sell your data, we do not share it for advertising, and there is no analytics or tracking on this site. The only third parties involved are Microsoft Azure (hosting) and Stripe (payments).
Cookies
One essential cookie, which keeps you signed in. It is not used for tracking and there is no advertising cookie, which is why this site shows you no cookie banner.
What you can ask for
Under UK GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Email support@devsoftuk.com and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner’s Office at ico.org.uk.
This page describes how the service actually works and is not legal advice. Have it reviewed before relying on it commercially.