Privacy Policy
Last updated: February 9, 2026
1. Information We Collect
We collect the following information when you use DailyDesign:
- Email address — provided when you subscribe to our newsletter.
- Preferences — optional information you provide during onboarding (years of experience, role, preparation stage, timezone).
- Payment information — processed and stored by Stripe. We never see or store your full credit card number.
2. How We Use Your Information
- Email delivery: We use your email address solely to send you daily system design scenarios and service-related communications.
- Content personalization: Your preferences may be used to tailor content difficulty and topic focus in future updates.
- Subscription management: Your Stripe customer ID links your payment to your account.
3. We Do Not Sell Your Data
We will never sell, rent, or share your personal information with third parties for marketing purposes. Your email is used exclusively for DailyDesign communications.
4. Third-Party Services
We use the following third-party services to operate DailyDesign:
- Stripe — payment processing. Stripe handles all payment data under their own privacy policy.
- Resend — email delivery. Resend processes your email address to deliver our daily emails.
- Vercel — hosting. Our application is hosted on Vercel's infrastructure.
- Turso — database hosting. Your subscriber data is stored in a Turso-hosted database.
- OpenAI — content generation. No subscriber data is sent to OpenAI; only content generation prompts.
5. Cookies
DailyDesign uses minimal cookies. We do not use tracking cookies or third-party advertising cookies. Essential cookies may be used for basic site functionality by our hosting provider (Vercel).
6. Data Retention
- Active subscribers: Your data is retained as long as your subscription is active.
- Unsubscribed users: Your email and preferences are retained for 90 days after unsubscribing, then permanently deleted.
- Email logs: Delivery logs are retained for 30 days for debugging purposes.
7. Your Rights
You have the right to:
- Unsubscribe at any time using the unsubscribe link in any email.
- Request data deletion by contacting us at the email below.
- Access your data by requesting a copy of all information we hold about you.
- Update your preferences through the preferences link in your emails.
8. Security
We take reasonable measures to protect your personal information. Access tokens are generated using cryptographically secure random bytes. All connections use HTTPS encryption. Payment data is handled entirely by Stripe's PCI-DSS compliant infrastructure.
9. Changes to This Policy
We may update this privacy policy from time to time. Material changes will be communicated via email to active subscribers. The "last updated" date at the top reflects the most recent revision.
10. Contact
For privacy-related questions or data requests, contact us at support@dailydesign.dev.