Your privacy.

The information we use

• Account information: your email address, account identifier, sign-in provider, verification status and authentication records. Email passwords are handled by Supabase Auth; DAILY does not display your password.
• Profile information: the display name, username, photo, biography, country code and timezone you provide, plus your account creation date.
• Gameplay: challenge attempts, guesses, scores, completion times, streaks and leaderboard results. Guest progress is associated with a guest identifier and can be linked to your account when you sign in.
• Social features: private league names, memberships and invite codes. League members can see the display names, photos and official weekly scores of other members in that league.
• Optional reminders: if you enable browser notifications, we store your account ID, the browser's confidential push endpoint and its encryption keys. We do not use this permission until you choose it.
• Technical information: page and gameplay events, request identifiers, browser/device information, performance measurements and security logs. Services handling requests can process IP addresses.

We use this information to provide sign-in and account features, remember progress, calculate scores, display profiles and leaderboards, deliver authentication emails, prevent abuse and understand how the service performs.

Signing in with Google

If you choose Google sign-in, Google provides basic identity information such as your Google account identifier, email address, name and profile-picture information to Supabase Auth for DAILY. We use it to authenticate you and associate your sign-in with a DAILY account.

DAILY requests basic email and profile permissions. It does not request access to your Gmail messages, Google Drive files, contacts or calendar. Your Google password is entered on Google's sign-in page, not into DAILY.

Google account information is used for sign-in and account operation, not advertising or sale to data brokers. You can review or remove DAILY's access in your Google Account's third-party connections settings. Removing Google access does not itself delete your DAILY profile or gameplay records; contact us if you also want these deleted.

What other players can see

Your public player page shows your display name, username, profile photo, biography and join date. Leaderboards show eligible scores and link to player pages. Public pages and uploaded avatars can be viewed without signing in, so only include information you want to make public.

Your email, country code and timezone are not displayed on your public player page. Public profile pages do not allow other visitors to edit your account. Avoid including private information about yourself or other people in your biography or photo.

Services that help run DAILY

• Stripe: optional support payments and ad-free subscriptions. When you start checkout, we send your account email and a reference linking the payment to your DAILY account. Stripe collects payment and billing details directly. DAILY stores Stripe customer, checkout and subscription references, selected amounts, payment-event references and ad-free access status. We do not store full card numbers or card security codes, and payment details are not shown on public profiles or sent to advertising code.
• Supabase: authentication, database storage and profile-image storage.
• Vercel: website hosting, request handling, web analytics and performance monitoring.
• Resend: delivery of authentication emails through the configured mail service.
• Google: optional Google sign-in and, when configured, consent management and advertising.

These services process information needed to provide their functions. Authorized site administrators can access information needed for support, moderation and service operation. Information may also need to be disclosed to meet applicable legal requirements.

Provider infrastructure may process information outside your country. Contact us for information about the arrangements and safeguards that apply to your data.

Cookies and usage information

DAILY uses authentication cookies to keep you signed in and a guest-session cookie to connect guest visits with game progress. The application sets these cookies with a lifetime of up to 30 days; sessions can end earlier, and cookies may be renewed as you use the service. Clearing cookies can sign you out or disconnect guest progress.

If you consent to optional analytics, DAILY records page views and gameplay events, including challenge starts, completions, abandoned attempts and shares. These events can be linked to your account or guest identifier. Vercel's analytics and performance tools also help measure visits and technical performance after that choice. Without a configured consent manager or without consent, these optional tools stay off. Essential gameplay records and security logs are still needed to operate the service.

Optional advertising

DAILY is preparing manual Google AdSense placements outside active guessing. Advertising is off unless the service is configured, enabled and your consent allows it. Ordinary ad clicks never unlock clues or improve a score.

When enabled, Google and its advertising partners may use cookies, device identifiers, IP addresses and information about your interaction with ads to deliver, personalize and measure advertising. The consent manager identifies applicable purposes and vendors. DAILY does not send your Google sign-in information, email, biography, answers or profile photo to its advertising code.

Optional advertising and optional analytics have separate consent signals. Advertising diagnostics, if you allow analytics, record placement and loading outcomes without an account, guest or attempt identifier. These are technical diagnostics, not Google’s billable impression or revenue records.

You can refuse optional tracking and still play. Use Cookie preferences to review or withdraw choices through the configured consent manager. Your page may reload after withdrawal to stop previously loaded tracking libraries. For Google’s handling of partner-site information, see Google’s explanation.

Keeping and deleting information

Payment and billing records may need to be retained for accounting, fraud prevention, disputes and applicable legal obligations. Contact us about the records and retention periods that apply to a deletion request. Cancel an active subscription before deleting your account; contact support if you cannot access it. Stripe also handles information under its Privacy Policy.

Account, profile and gameplay records remain available until deleted. You can change your public profile in your account page. To request account deletion, contact us using the address below; deleting an account is not currently a self-service button in DAILY.

Deleting or replacing a photo removes it from the active profile, but copies already downloaded or cached by others may remain. Authentication, email, hosting logs and backups follow the relevant provider's retention settings. Records may need to be retained for security or applicable legal obligations; ask us about the information covered by a deletion request.

Turning off a DAILY reminder removes that browser's push subscription from our active records. Expired browser endpoints are also removed when the push provider reports that they no longer work.

Your choices and rights

You can play available guest challenges without creating an account, choose email sign-in instead of Google, edit your profile, turn browser reminders on or off, and sign out. An account is needed for account-specific features such as saved history and private leagues.

Depending on the law that applies to you, you may have rights to access, correct, delete or receive a copy of your information, restrict or object to processing, or withdraw consent where processing relies on consent. Contact us to make a request. We may need to verify that the request relates to your account before disclosing or changing personal information.

You may also contact your local data-protection authority about a privacy concern. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).