DailiesPrivacy
Dailies is a small app run by one person. I keep your scores because the app doesn't work without them. I don't sell data, there are no ads, and there are no ad trackers and no third-party analytics. You can download your scores and settings, and delete your account, from the Account tab.
What's stored
| What | Why |
|---|---|
| Your email | To send your sign-in code and tell your account apart from others. |
| Username, and a photo if you add one | So friends can find you. |
| Scores, starred games, settings | Streaks, stats, the Friends comparison, your visa book (which visas you have and the day each was first granted), and keeping your phone and laptop in step. |
| Your founder number, if you were one of the first 100 players, and the visas you pick for your profile | For your passport and your profile page. |
| Your time zone | So your days match your clock and reminders come in your evening. |
| Sign-in sessions: the network address and browser of each | Kept by Supabase's sign-in service to keep you signed in and spot misuse. |
| Friend requests and friends | To connect you with people you add. |
| Your plan, its price and next billing date, and a customer ID from the payment company | To know if you have Plus, and to email you before a trial ends or a plan renews. Card numbers never reach Dailies. |
Playing without an account
Today's scores and your game list stay in your browser. They aren't sent anywhere. If you sign up later, today's scores move into your account and are removed from the browser.
One exception: if you play a Dailies Original as a guest, the server keeps that game's progress for the day under a random code saved in your browser. It also keeps a scrambled version of your network address that changes daily, never the address itself, so one network can't start endless guest games. Both are deleted within a few days.
Who sees what
- Friends you've accepted see your scores (the last two weeks on the free plan, all of them with Plus) and your whole visa book with dates. They don't see your email or settings.
- Your visas: friends you've accepted see which visas you have. Your profile page, dailiesdaily.com/u/<your username>, can be opened by anyone with the link, signed in or not. It shows only your username, photo, founder number (if you have one) and up to six visas: the ones you pick in Account, or your rarest. No email, no scores, no friends. There's no search or list of profiles.
- Visa counts ("12% of travellers hold this") are counts only, never names, and stay hidden until 5 people hold a visa. Leaving Everyone averages also leaves you out of these counts.
- Road Trips: stop results are seen only by the people who joined that trip. Anyone with a trip's invite link can see its name, route, host and who is on board, but no results. Past trips are kept until the account is deleted. Deleting yours takes you off every trip you were on, along with your results; deleting the account of a trip's host removes that trip for everyone on it.
- The Everyone column in Friends (Today) is an average. No names, no individual scores, and nothing shows until 5 people have played that game that day. Signed-out visitors see the same kind of average: a percentile from yesterday, shown only once at least 20 people have opted in, with no names and no individual scores. You can leave it under Account → "Count me in Everyone averages".
Companies involved
- Supabase holds the database, sign-in and photos.
- Resend sends the emails: sign-in codes, streak reminders, and billing reminders if you subscribe. It gets your email address and what the email says: your username, and your streak or your plan's price and renewal date.
- Cloudflare hosts the site and runs the check on the sign-in page (Turnstile), which looks at your network address and browser to tell people from bots.
- Stripe takes card payments on the web. Apple, Google and RevenueCat handle subscriptions bought in the phone apps.
They only get what they need to do that job. When you open Wordle or another game from Dailies, you're on that game's site and its own policy applies.
The Chrome extension
If you install it, it reads one thing: the text a game copies when you press Share, and only on the pages of the games Dailies supports. It sends the game, the day and your score. It never has your login. Connecting it makes a key that can only add scores to your account, stored in scrambled form, and you can disconnect it whenever you like. More about the extension.
Counting use
To see which parts of Dailies people use, the web app counts a handful of things (opened the app, picked games, stamped a first score, signed up, finished an Original, opened the paywall, started checkout, shared a result, turned on notifications, and started, skipped or finished the intro tour). Each count is stored with a random code that lives in your browser. It holds no name, email, account or IP address and can't be tied back to you. It is switched off if your browser sends Do Not Track or Global Privacy Control, and clearing site data gives you a new code. Only the live site counts: visits from test and preview copies, and from the owner's own browsers, are left out.
Notifications
Browser notifications are off until you turn them on in Account. If you do, Dailies keeps this browser's push address (a link your browser's own push service gave it) and its keys, so it can send you a notice when a friend reacts to your score, plays a game on your list, or your streak is at risk. Messages are delivered through your browser maker's push service (Google, Apple or Mozilla). Turn them off in Account, or delete your account, and the address is deleted. If you only block them in your browser, it's deleted the next time a notice can't be delivered.
Cookies
The site uses your browser's storage to keep you signed in and remember your scores and settings. No advertising cookies.
Emails
- Sign-in codes, when you ask for one.
- Streak reminders: at most one in the evening, your time, when a streak is about to end. Turn them off in Account → Streak reminder emails, or with the Unsubscribe link in any of them.
- Billing reminders, if you subscribe on the web: the day before a free trial ends, and before a renewal.
Your data, your call
- Download it: Account → Export my data.
- Delete it: Account → Delete account. That removes everything tied to you and cancels a web subscription. Stripe keeps its own record of your past payments. Subscriptions bought through Apple or Google have to be cancelled in their settings.
- Change your username or photo any time.
Backups can hold deleted data for a short while before it's gone for good.
Kids
Dailies isn't meant for children under 13, and I don't knowingly collect their information. If a child has made an account, email me and I'll delete it.
Security
Everything travels encrypted. The database itself only lets an account read its own records and the scores of accepted friends.
If this changes
I'll update the date at the top, and say so in the app if the change matters.