Privacy policy
In short
Playing doesn't need an account and we don't use cookies. Without an account, nothing personal leaves your device. If you choose to create an account, we keep only what's needed to save your progress and, if you ask for them, to send you emails. We don't sell data and there are no ads.
Who is responsible
TLL Studios is responsible for your data. Contact: hello@dayzle.app.
What stays on your device
To save your game in progress, your statistics, your streak and your theme, the site uses your browser's local storage. This data stays on your device and you can delete it at any time by clearing your browser's site data. If you sign in, a copy of your progress is also kept in your account (see below).
If you create an account
We keep: your email address and how you sign in (Google or an email link), the identifier our sign-in provider gives your account, the public name and avatar you choose, the language of our emails, your country if you give it, your confirmation that you meet the minimum age (we don't ask for your date of birth) and when you accepted these terms.
We also keep your synced progress (official results with their time and pauses, the days you played, achievements and experience), the devices where you use your account (browser and system, such as "Chrome · Android", and the last sync) and your email choices with the date, where you made them and the wording you accepted.
Why, and on what legal basis
Running your account and saving and syncing your progress: to provide the service you ask for (performance of a contract, Art. 6(1)(b) GDPR). Sign-in links and the welcome email are part of that service.
The daily reminder, news and seasons, and the weekly summary: only with your consent (Art. 6(1)(a) GDPR and Art. 21 of the Spanish Information Society Services Act, LSSI). Every box starts unticked, you confirm by email before we send anything, and you can withdraw it in one click from any of those emails or from your profile.
Security and abuse prevention (request limits, technical logs): our legitimate interest in keeping the service safe (Art. 6(1)(f) GDPR).
Who processes it for us
Google (Firebase Authentication) handles signing in; Render runs our server; Neon hosts our database; Resend sends our emails; Cloudflare serves the website. They act as our processors under data processing agreements. Some of them may process data outside the European Economic Area, for example in the United States, under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it
For as long as your account exists. If you delete it, your account and synced progress are erased from our database straight away and your sign-in account is deleted from Firebase; copies in our provider's encrypted backups disappear within 30 days. Technical server logs are kept for at most 30 days. Without an account, we keep nothing about you.
Minimum age
You must be at least 16 to create an account, the age at which you can give consent on your own throughout the European Union. Younger players can keep playing without an account.
Anonymous statistics
To know which games people enjoy, we count aggregate events such as "a game was started", "a game was completed" or "a result was shared" using a self-hosted, cookieless analytics tool (Umami). We don't send any user identifier, not even when you're signed in. To measure whether people come back, your own device works out whether today is your first, seventh or thirtieth day since you first played and sends only that number. If your browser sends a Do Not Track or Global Privacy Control signal, we send nothing at all.
Selling and sharing
We don't sell or share data for advertising. Apart from the processors listed above, we only disclose data when the law requires it. Like any web server, the services above process your IP address to deliver pages and answer requests.
Your rights
You can access and download your data ("Download my data" in your profile), correct it (edit your profile), delete it ("Delete my account"), take it elsewhere (the download is a JSON file), object to or restrict its processing and withdraw any consent at any time. For anything else, write to hello@dayzle.app. If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or the authority in your country.