Daylyf Cookie & Tracking Policy
Last updated: 22 Aug 2026
Operator: Daylyf Ltd Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom Company number: 17374540 (registered in England and Wales) ICO registration number: ZC210969 Contact: privacy@daylyf.com
1. The Daylyf mobile app
The Daylyf mobile app does not use cookies in the traditional web sense. It does use a small number of equivalent technologies that are subject to the same privacy principles:
| Technology | What it does | Strictly necessary? |
|---|---|---|
| Secure local storage (auth session, role, preferences) | Keeps you signed in across launches | Yes — without this you would have to sign in every time |
| Push notification token (Expo Push) | Lets us send you booking and message notifications | No — turn off in your device settings |
| Crash and basic usage analytics (when enabled) | Helps us spot bugs before you do | No — toggle off in Profile → Privacy |
| Cloudflare Turnstile challenge token | Bot defence at signup and login | Yes |
We do not use third-party advertising trackers, behavioural ad SDKs, fingerprinting libraries, or cross-app identifiers.
2. The Daylyf marketing site (daylyf.com)
Our marketing and legal websites use a small number of cookies. When you first visit, you'll see a UK GDPR–compliant consent banner. The categories are:
2.1 Strictly necessary (always on)
These cookies are essential for the site to work. They never need consent under PECR.
- Session / load balancer cookies
- CSRF token cookies
- Cookie-consent banner state
2.2 Analytics (only with your consent)
If you opt in, we load Cloudflare Web Analytics, a cookieless visitor-counting script, to understand which pages convert. It only loads after you opt in here, even though Cloudflare's own analytics doesn't use cookies. We do not share this with advertisers.
2.3 Campaign tags (no cookie)
If you land on daylyf.com from an ad, the page URL may carry campaign tags (UTM parameters). If you join the waitlist during that visit, those tags are sent once along with your sign-up so we know which campaign worked. No marketing cookie is set for this today, and we do not run retargeting or behavioural ads. There is no separate consent choice for this because no cookie or cross-visit tracking is involved.
2.4 Third-party pages (Stripe & Didit)
If you are redirected from Daylyf to Stripe (Checkout, Connect onboarding, or Express Dashboard) or Didit (ID verification), those providers may set their own cookies or similar technologies on their domains under their privacy policies. Daylyf does not control those third-party cookies. See:
- Stripe: https://stripe.com/privacy
- Didit: https://didit.me/legal/privacy-policy
3. How to manage cookies
- In the app: Profile → Privacy → toggle analytics / push notifications.
- On the marketing site: click "Cookie settings" in the footer at any time.
- In your browser: all major browsers let you block or delete cookies in settings.
4. Changes
We may update this policy. The "Last updated" date at the top reflects the latest version.