Privacy Policy

The address of our website is: https://devshot.com

Responsible for this website is Anticipater GmbH, Alter Schlachthof 39, 76131 Karlsruhe, represented by Thorsten Reiser.

This website does not use cookies, tracking pixels, analytics, or any client-side storage. All assets (fonts, scripts, stylesheets) are self-hosted. External requests are limited to necessary service providers.

Further information can be found in our Cookie Policy.

The main DevShot website (devshot.com) is hosted on Ionos SE, Elstner Straße 57, 76199 Karlsruhe, Germany. Ionos may process server logs including IP addresses when serving pages.

More information: https://www.ionos.com/en/terms-privacy

When you register an account or use the DevShot Console, we collect the data you provide (name, email address, billing details) to provide and manage your service. VM session data and command history are processed to deliver the service and are retained for the duration of your account.

Our servers and VM infrastructure run on Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes data on our behalf as a data processor. All data remains within the EU.

More information: https://www.hetzner.com/legal/privacy-policy

The DevShot Console (web application) is hosted on Railway.app. Railway may process server logs including IP addresses when serving pages.

The Console backend, including authentication and data management, runs on Supabase, an open-source PostgreSQL database platform. Supabase processes account data and console metadata.

More information:

• Railway: https://railway.app/legal/privacy
• Supabase: https://supabase.com/privacy

Desktop sessions use WebRTC technology to establish peer-to-peer connections between your browser and the VM agent. Cloudflare provides TURN relay services for NAT traversal. When a direct peer-to-peer connection is not possible, your session data is relayed through Cloudflare's infrastructure.

Session data (VNC and terminal) flows through encrypted WebRTC DataChannels and is not stored by Cloudflare. Cloudflare's involvement is limited to facilitating the connection; we do not transmit personal data to Cloudflare beyond the minimum required for relay.

More information: https://www.cloudflare.com/en-gb/privacypolicy/

We use Brevo (formerly Sendinblue) to send transactional and marketing emails. Brevo processes your email address and communication data. Email content and engagement data may be processed by Brevo's infrastructure.

More information: https://www.brevo.com/legal/privacypolicy/

For payment processing we use Stripe Payments Europe, Ltd. Payment data is transmitted directly to Stripe and processed by them. We do not store your payment card details.

More information: https://stripe.com/privacy

Your personal data is not sold or shared with third parties, except:

• Ionos — website hosting
• Hetzner — VM infrastructure hosting
• Railway — Console hosting and deployment
• Supabase — Console backend and authentication
• Cloudflare — WebRTC TURN relay for peer-to-peer connections
• Brevo — email communication and transactional emails
• Stripe — payment processing
• Where you have given explicit consent
• Where we are legally required to do so

Account and billing data is stored for the duration of the contractual relationship and the statutory retention periods thereafter. You can request deletion of your account data at any time by contacting us, subject to statutory retention obligations.

Under GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and the right to object. To exercise your rights, contact us at privacy@devshot.com.

You also have the right to lodge a complaint with the supervisory authority: Landesbeauftragter fur den Datenschutz und die Informationsfreiheit Baden-Wurttemberg.

Last updated: April 2026