Draft: pending legal review

Privacy

Last updated 28 September 2026

The short version

When you play, we keep a random id, your answers and your scores, so your streak and stats work. If you add an email, we use it for sign-in links and, only if you ask, the morning email. We don’t show ads, we don’t sell data and we don’t use tracking cookies. You can download or delete your data at any time in Settings.

Who we are

The organisation responsible for your data (the controller) will be named here before launch. Contact us at privacy@dailylap.app.

If you play without an account

Your first answer creates a random id. We store it with your answers, scores and streak on servers in London. Your browser keeps a sign-in cookie so your games stay linked to you, plus your display settings. If you stop playing, we delete an anonymous id and its games 13 months after it was last used.

If you create an account

We store your email address and, if you choose one, a display name. Display names are public on the leaderboard, so don’t use your real name. Accounts are for people aged 13 or over. We keep your account until you delete it, or after 24 months with no activity and a reminder email.

The daily email

Only if you tick the box or turn it on in Settings. It carries the day’s first question, your streak and a link to play, at 7am in your time zone. We don’t track opens. A click only counts when you actually answer. Every email has a one-click unsubscribe, and you can change how often it comes in Settings.

Notifications

Only if you turn them on, from the home-screen app or Settings. We store the address your phone’s push service gives us for this device (Apple, Google, Mozilla or Microsoft deliver the notification) and send at most one a day, at 7am in your time zone, only if you haven’t played yet. Turn them off in Settings and we delete that address straight away. If you block them in your phone’s settings instead, we delete it as soon as the push service tells us it no longer works.

How we measure what works

We count how the game is used (for example, how many people finish) without cookies and without storing anything on your device for it. You can switch this off in Settings. We never send your answers or your email address to our analytics.

Cookies and storage on your device

• A sign-in cookie, set when you first answer or sign in, keeps your games and streak linked to you.
• A day-long cookie from an email answer link lets you play that day’s set without signing in.
• A one-hour cookie moves this device’s games into your account when you sign in.
• Local storage remembers your theme, the describe-colours setting and whether you’ve dismissed the email, home-screen or notification prompts.
• If you add Daily Lap to your home screen or turn on notifications, a small background script (a service worker) is installed to show them. It doesn’t read or cache the pages you visit.

All of these are needed for the game you asked to play. None is used for advertising.

People named in our questions

Steward questions describe real incidents using public decisions. If you’re named and something is wrong, tell us at legal@dailylap.app and we’ll correct it.

Who helps us run Daily Lap

Supabase (database and sign-in, London), Vercel (hosting, London with a worldwide edge network), Resend (sending email), PostHog (analytics, EU) and Sentry (error reports, EU). Some are US companies, so your data may be accessed from the US under recognised safeguards.

Your rights

You can see, download, correct or delete your data. Download and delete are buttons in Settings, for anonymous players too. For anything else, email privacy@dailylap.app.

Young players

Anyone can play without an account. Accounts are for people aged 13 or over. We use the same high-privacy settings for everyone: no ads, no chat, no contact between players, email off by default, and no public name unless you choose one.

Keeping data safe

Data is encrypted in transit and at rest, access is limited to the people who need it, and staff accounts use two-factor sign-in.

Changes and complaints

We date every version of this notice and email account holders about material changes. If you’re unhappy with how we handle your data, tell us first. You can also complain to the Jersey Office of the Information Commissioner, the UK Information Commissioner’s Office or your EU data protection authority.