Privacy Policy

No accounts

D-Store doesn’t have user accounts, logins, or profiles. Browsing, searching, rating apps, and downloading APKs all work anonymously. There’s no personal information for us to collect in the first place for any of that. The one optional exception is update notifications, which store a small record for your device only if you turn them on — see “Update notifications” below.

Cookies we set

We set exactly two cookies, both functional, neither used for tracking or advertising:

• d-store-theme — remembers whether you’re using the dark or light theme, so it doesn’t reset every visit. Lasts one year.
• d-store-region — caches an approximate region (see below) for the length of your session, so we don’t look it up again on every page.

Neither cookie is readable by, or shared with, any third party.

Approximate region, from your IP address

Some apps in the catalog are only available in certain regions. To show you an accurate catalog, we look up an approximate region from your IP address the first time you visit in a session, using a third-party lookup service, ipapi.co. That lookup returns a country only — nothing more precise, like a city or exact coordinates — and your IP address is not stored by D-Store afterward; only the resulting country is cached, in the d-store-region cookie above. If the lookup fails or times out for any reason, we fall back to showing the full catalog rather than blocking your visit.

Ratings

Ratings are anonymous — we don’t ask who you are. To prevent spam, we store a one-way hash of your IP address alongside a rating, so we can tell “too many ratings from the same source in a short time” apart from normal use. A hash can’t be reversed back into your IP address. We don’t store your actual IP address for this, and we don’t link the hash to anything else you do on the site.

Reports

When you report an app (a broken link, a security concern, and so on), we store only the reason you selected and any details you typed in. We don’t store an IP address, a hash of one, or any other identifier alongside a report, so a stored report cannot be traced back to you. To stop abuse, the report form is limited to a few reports an hour from one connection: for that, a salted, one-way hash of your address is kept in a separate table for the length of that window and then discarded. It is never written to the report and is not linked to it.

Update notifications (optional)

You can choose to be notified when an app you’ve saved gets a new version. This is off unless you turn it on, and nothing described in this section is stored unless you do. It uses your browser’s standard Web Push feature, and your browser asks for your permission first.

If you turn it on, we store:

• A push address for your browser — a web address that your browser’s push service (run by your browser’s maker, not by us) gives us so we can send that one browser a notification.
• Two encryption keys that come with that address and are needed to encrypt a notification so only your browser can read it.
• The list of apps you asked to hear about, by app name in the catalog.
• The times the record was created and last refreshed.

We don’t store a name, an email address, an account or user ID, or your IP address with it, and we don’t link it to your ratings, reports or anything else you do on the site. The push address is still a per-browser identifier, so treat it as data about your browser rather than as nothing. We use it only to send you these update notifications, and we don’t share or sell it.

A notification names the app and its new version. It is delivered through your browser’s push service, which already knows your push address because it issued it, and which is subject to its own privacy policy.

We delete the whole record — address, keys and app list — when you turn notifications off in D-Store, or when your browser’s push service tells us the address is no longer valid. You can also switch notifications off in your browser’s site settings; we may not learn of that until the next time we try to send you something. Because there is no account, we can’t look a record up by who you are — turning notifications off in D-Store on the same browser is how you remove it.

What we don’t do

• No advertising cookies or ad-tracking pixels.
• No analytics that identify individual visitors.
• No selling or sharing of data with data brokers.
• No account, so no profile of your activity to hand over, lose in a breach, or delete on request — the only per-device record is the optional notification subscription described above, and you can delete that yourself.

APK downloads

Downloading an app fetches the APK file directly; that request doesn’t pass through any D-Store account system, because there isn’t one.

Children’s privacy

We don’t ask anyone for a name, email address or account, so D-Store doesn’t knowingly collect that kind of personal information from children either. Update notifications are optional and work the same way for everyone.

Changes to this policy

If what we collect or how we use it changes, we’ll update this page and the “Last updated” date above.

Contact

For a copyright/DMCA concern, see our DMCA policy. For anything else about an individual app, including malware concerns or broken links, use the “Report this app” form on that app’s page.