Privacy policy

Effective date: Sunday, October 25, 2026

Dezi (dezi.gallery) is a curated directory of design tools. This policy explains what personal data we collect when you use the website, why, who helps us process it, how long we keep it and what you can do about it.

Dezi is run by Nguyen Chung Tuyen, 28 Mai Chi Tho, Binh Trung Ward, Ho Chi Minh City, Vietnam, who is responsible for your personal data (the data controller). "Dezi", "we" and "us" in this policy mean the person who runs Dezi.

You can browse Dezi without an account. We only collect personal data when you sign in, send us a form or subscribe to the newsletter, plus the technical data any website needs to work.

1. Information we collect

a. When you browse

  • Technical data. Your IP address, browser and device type, and the pages you request. Our hosting provider, Cloudflare, processes this to deliver the site and protect it from abuse. We don't store IP addresses in our own database.
  • Analytics. We use Umami, a privacy-friendly analytics service that sets no cookies and doesn't identify you. It gives us totals such as page views, referring sites, countries and device types.
  • Settings on your device. Your theme (dark, light or system) and your last 8 searches are saved in your browser's local storage. They stay on your device, and you can clear them in your browser.

b. When you sign in with Google

Signing in is optional; you need it to save tools and create collections. Google shares your name, email address, profile photo and Google account ID with us. We never see your Google password. We store:

  • your name (you can change it on your Profile page), your email address, and the link to your Google profile photo or a photo you upload instead;
  • the tools you save and the collections you create;
  • the date you joined, and your sign-in sessions.

c. When you send us a form

  • Submit a resource: the link and details you enter, and your email address if you are signed in.
  • Feedback: your name, email address, subject and message.
  • Get in touch: your name, email address and message.

We store what you send and email it to our team mailbox so we can read and answer it. If you are signed in, we also record which account sent it.

d. When you subscribe to the newsletter

Your email address is sent to beehiiv, the service that sends our newsletter, and we keep a record of the sign-up. beehiiv may record whether a newsletter is opened and which links are clicked.

e. Ads

Dezi is free and is funded by sponsors and ads. Sponsored placements are sold directly to companies and use none of your data. Some pages may also show ads from Google AdSense (see section 4).

We don't ask for sensitive personal data (for example about health, religion, political views, finances or precise location). Please don't include it in the messages you send us.

2. How we use your information

  • To run the site and your account: sign you in, keep you signed in, and save your tools and collections.
  • To read and answer your messages, and review the tools you suggest.
  • To send you the newsletter, only if you subscribed.
  • To understand, in aggregate, which pages and tools people use, so we can improve Dezi.
  • To protect the site and its forms from spam, bots and abuse.
  • To show ads that keep Dezi free.
  • To comply with the law.

We process your personal data with your consent, which you give when you sign in, send a form or subscribe (each of these links to this policy), and otherwise only where the law allows processing without consent, for example to meet a legal obligation. You can withdraw your consent at any time (see section 6); this does not affect processing done before. We don't use your data for any other purpose without asking you first, we don't sell it, and we don't use it to make automated decisions about you.

3. Who we share it with

We use a few service providers, who process data on our behalf and only for the purposes above:

  • Cloudflare: hosting, our database and file storage (accounts, collections, form messages, uploaded photos), security, and Turnstile, which checks that forms are sent by people rather than bots.
  • Google: "Sign in with Google"; Google Workspace, which hosts our team mailbox where form messages arrive; and Google AdSense for ads.
  • Resend: delivers form messages to our team mailbox.
  • beehiiv: sends the newsletter.
  • Umami: website analytics.
  • ImageKit: delivers the tool images you see on the site.

We may also share information when the law or a competent authority requires it, to protect our rights or our users' safety, or as part of a transfer of Dezi to a new owner, in which case this policy keeps applying to your data.

These providers operate servers in many countries, including the United States, so your data may be transferred and processed outside Vietnam and outside the country where you live. We only transfer it to the providers listed here, for the purposes in this policy, and in line with Vietnamese law on cross-border transfers of personal data.

4. Cookies and similar technologies

Dezi itself only sets the cookies needed for signing in:

  • __Host-dezi_sid keeps you signed in (up to 30 days, extended while you keep using the site).
  • dezi_in tells our pages that you may be signed in (same lifetime).
  • __Host-dezi_oauth protects the Google sign-in step (10 minutes).

We also use your browser's storage for your theme, your recent searches and, during sign-in, to finish saving a tool once you are back from Google.

Other services:

  • Cloudflare Turnstile runs when you open a form, to check that you are a person. Cloudflare may also set cookies that protect the site from bots.
  • Umami uses no cookies.
  • Google AdSense. Where ads are shown, Google and its partners use cookies and similar technologies to serve and measure ads and, if you allow it, to personalise them based on your visits to this and other websites. Visitors in the European Economic Area, the UK and Switzerland are asked for consent first. You can turn off personalised ads in Google's Ad Settings and read how Google uses information from sites that use its services.

You can block or delete cookies in your browser. You can still browse Dezi, but you won't be able to sign in or save tools.

5. How long we keep it

  • Account, saved tools and collections: until you delete your account.
  • Sign-in sessions: until you sign out, or at most 30 days after they were last extended.
  • Uploaded profile photo: until you remove or replace it, or delete your account.
  • Form messages: 24 months, then deleted, including the copies emailed to our team mailbox.
  • Newsletter: your subscription lasts until you unsubscribe; our own record of the sign-up is deleted after 24 months.
  • Analytics: only as totals that are not linked to you.

We may keep data longer only where the law requires it.

6. Your rights and choices

Under Vietnamese law, and the laws of many other countries, you have the right to: be informed about how your data is processed; give or withdraw your consent; access your data and get a copy of it; have it corrected or deleted; restrict or object to its processing; complain to the competent authority or go to court; and claim compensation for damage, as provided by law.

In practice:

  • See and correct your data. Your name, email address and photo are on your Profile page, where you can change your name and photo. Your email address comes from Google and is updated each time you sign in.
  • Delete your account. Profile → Delete account immediately deletes your account, saved tools, collections, sessions and uploaded photo, and the messages you sent us through our forms while signed in or from the same email address. Copies already in our team mailbox are deleted when you ask us.
  • Unsubscribe from the newsletter with the link at the bottom of every issue.
  • Personalised ads: see section 4.
  • Anything else (a copy of your data, deleting a message, withdrawing consent): email hello@dezi.gallery.

We may ask you to confirm that a request comes from you. We answer as soon as we can, and within the time limits set by law.

7. Security

The whole site runs over HTTPS. We never handle passwords, because Google signs you in. Your session cookie can't be read by scripts on the page, and our database only stores a scrambled (hashed) form of each session key. Forms are protected by Turnstile and rate limits, and only the Dezi team can reach the admin area. No system is perfectly secure; if a breach affects your personal data, we will inform the competent authority and, where required, you, within the time limits set by law.

8. Links to other websites

Dezi links to the tools it lists. These links tell the tool's website that you came from Dezi (for example with utm_source=dezi.gallery), some are affiliate links that may earn us a commission, and sponsored placements are labelled. Once you leave Dezi, the other website's privacy policy applies.

9. Children

Dezi is not intended for children under 16. If you are under 16, please don't sign in, send us forms or subscribe. We don't knowingly collect children's personal data; if you believe a child has given us their data, contact us and we will delete it.

10. Changes to this policy

When we change this policy, we update the effective date at the top of this page and show a notice on the site for important changes.

11. Contact us

Questions or requests about this policy or your personal data:

Nguyen Chung Tuyen (Dezi), 28 Mai Chi Tho, Binh Trung Ward, Ho Chi Minh City, Vietnam.

Email: hello@dezi.gallery

This policy is governed by the laws of Vietnam, like our Terms of Service.