Dailies

Privacy Policy

Draft, 15 September 2026

Draft pending review. The description of how Dailies works is accurate, but the entity details and jurisdiction still have to be completed and the wording checked before this page is relied on.

Who is responsible

The controller of your personal data is [TO BE COMPLETED: legal entity name and registered address]. For anything on this page, write to [TO BE COMPLETED: contact email].

What we collect, and why

We collect as little as the service can run on.

Your account. A username, and an email address where you gave one. Signing in with GitHub or Google passes us your identifier on that service and your email; we never receive your password for either.
Your password, if you chose email sign-in. It is stored only as a slow one-way hash, so it cannot be read back or recovered, only checked.
Your work. The Projects, components, media and rendered video in your workspace, stored so they are there when you come back.
What you publish. Your profile, your listings and your comments, if you choose to publish them.
Your IP address, briefly. It is used to count requests against the rate limits that keep the service from being abused. These counters are deleted automatically once their window passes.

We do not run advertising, we do not sell or share your data with anyone for their own purposes, and we do not use your work to train models.

Analytics

The site currently runs no analytics and sets no tracking cookies. If we add measurement later it will be a form that does not track you across other sites, and this page will say so before it starts.

Cookies

One cookie, and only after you sign in: a session cookie that keeps you signed in. It is HttpOnly, Secure and SameSite=Lax, so it cannot be read by scripts and does not travel to other sites. A session lasts up to 30 days of use and at most 90 days in total, after which you sign in again. During sign-in a short-lived cookie also guards the round trip against being tampered with.

Where your data is held

Dailies runs on Cloudflare, which stores the database, the media and the workspace backups, and which may process data in several countries. Email is sent through Resend. Payments, when they open, will be handled by a merchant of record who receives the billing details directly; we never see or store your card number.

How long we keep it

Your work and your account, for as long as your account exists.
Sessions, until they expire, and expired ones are swept hourly.
Rate-limit counters, until their window closes, then swept hourly.
Payment records, for as long as tax and accounting law requires.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and everything in it. Write to [TO BE COMPLETED: contact email] and we will act on it, and in any case within the time the law allows. Depending on where you live you may also have the right to object to some processing, or to complain to your data protection authority.

Deleting your account removes your workspace, your stored media, your listings and your published profile. Copies of a listing that other people already took stay in their own workspaces, because those are their copies.

Children

Dailies is not intended for children. Do not create an account if you are under the age at which you can consent to this in your country.

Changes

If we change how we handle your data, this page changes with it, and we will say so rather than change it quietly.