Privacy Policy

Who is responsible

NDVR LTD is the controller of personal information processed through A Day At A Time.

Information we collect

• Account email address, authentication records and account identifiers.
• Daily Question answers and a pseudonymous visitor token used to prevent duplicate responses.
• For signed-in accounts, which days you used a feature and which kind of feature it was (for example “question answered” or “sudoku completed”), so that your run of days follows you between devices. We never record what you wrote or which puzzle you played as part of this, and nobody else can see it. It is deleted with your account and included in Download My Records.
• With each public Daily Question answer, a scrambled fingerprint of the connection it came from. It is used only to limit repeated submissions. We do not store the network address itself, the fingerprint cannot be turned back into one, it is different for every question so it cannot link your answers from one day to another, and it is deleted with the answer.
• Saved answers, and the Time Capsule titles, messages, dates and photographs you choose to save.
• If you share a Time Capsule, the private link code for it and when sharing started or stopped. We do not collect any information about the people you share a link with.
• Messages you send to our contact address.
• Device-level preferences, session information and challenge completion stored in your browser.
• Analytics and advertising information only when you consent to the relevant optional technologies.

Why and how we use information

Contract and requested services

We use account and Time Capsule information to create accounts, authenticate users, save private content and provide the features a user requests.

Legitimate interests

We use limited technical information to secure ADAT, prevent duplicate responses, investigate faults and improve reliability. We balance these interests against user privacy.

Consent

We rely on consent for optional analytics, advertising technologies and any future email marketing. Consent can be changed at any time through Cookie Preferences.

Time Capsule sharing and reminders

If you create a share link, anyone holding it can read that capsule once it opens: its title, message, the date it was written and your display name. Before then they see only the opening date. Once it opens, they also see up to four of the capsule’s photographs. Each photograph is shown through a private link that stops working after 15 minutes. You can stop sharing at any time, and the link stops working immediately. When one of your capsules opens, we email you to say so; you can turn these emails off in My Time Capsule. Time Capsules by email (“Email me this in a year”) need no account. We keep the note, the email address and the chosen date, and send a one-click confirmation first; nothing is scheduled until you confirm, and an unconfirmed note is deleted after 7 days. On the date we email the note to you, then delete the record within 90 days. Every such email carries a link that stops any further ones. If you later create an account with the same address, the note is copied into your Time Capsule.

Daily Question responses

Responses may be analysed to produce anonymous themes, totals and percentages. Users should not include names, contact details or sensitive personal information in public-response fields.

Service providers and transfers

We use service providers including Supabase for authentication, database and private file storage; GoDaddy for website hosting and business email; Resend to send the email we send you when a Time Capsule opens; and, Google Analytics after consent in our cookie banner, and Google AdSense for adverts, which asks for advertising consent through its own message before any personalised advert is shown. These providers may process information outside the UK under their applicable transfer safeguards and contractual terms.

We do not sell personal information. We may disclose information where required by law, to protect users or the service, or as part of a properly managed business transfer.

How long we keep information

• Account answers, Time Capsules and photographs: until you delete them or delete your account. You can delete any saved answer or Time Capsule yourself, at any time, in My Answers and My Time Capsule. It is removed straight away, together with its photographs and any share link.
• Deleting your account: choose Delete My Account in your account menu. We ask for your password, then wait 7 days in case you change your mind; during that time your account works as normal and you can cancel by signing in. After 7 days your saved answers, Time Capsules and their photographs, puzzle scores and sign-in details are permanently deleted. We keep no backup copies, so they cannot be recovered by anyone, including us. We email you when the request is made and again when the deletion is complete.
• Raw anonymous Daily Question responses: up to 12 months. These are not linked to your account and hold no name or email address, so we cannot identify yours in order to remove them when you delete your account; the private copy saved in your account is deleted.
• Anonymous totals and trends: may be retained longer because they are not intended to identify an individual.
• Support correspondence: normally up to 24 months after the matter is closed.
• Cookie preferences: until changed, cleared from the browser or replaced by a newer consent version.

Security

We use access controls, authenticated requests and private storage for account content. No online service can promise absolute security. Users should choose a unique password and never share access codes.

Your rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or object to processing, and to receive certain information in a portable form. Where processing is based on consent, you may withdraw it.

You can use two of these rights yourself, in your account menu: Download My Records gives you a copy of your saved answers and Time Capsules, and Delete My Account erases your account and everything in it. For anything else, contact info@adayatatime.com. You may also complain to the Information Commissioner’s Office.

Age limit

Accounts and personal Time Capsule features are for people aged 16 or over. We do not knowingly provide accounts to children under 16. A parent or guardian who believes a child has supplied personal information should contact us.

Changes

We will update this notice when ADAT’s services or legal obligations change. Material changes will be highlighted on the site.