Website Privacy Notice
Version web-privacy-0.7, last changed .
The short version
This website asks you for two things, and only if you want to give them. There is a box where you can leave an email address so that we can tell you when signup opens, and one on the blog where you can leave an address to be told when there is a new post. Nothing else on the site asks you for anything, and you cannot create an account here. One cookie is set if you press the light and dark switch at the foot of the page, and not otherwise.
If you leave your address, we email you once — on the day signup opens — and then delete the list. Nothing is kept until you have followed the link in a confirmation email. If you never follow it, the address goes within 24 hours. To come off the list at any time, write to hello@justoneaday.app and we delete it.
If you leave your address on the blog, we email you when there is a new post, and for nothing else. Every one of those emails carries a link that deletes your address. Following it is all there is to it.
Like every website, ours keeps a log of the requests it receives. That log includes the address your internet connection is using at the time. We keep it to stop the site being attacked and to work out what has gone wrong when something breaks. We do not use it to work out who you are, and nothing here follows you to another website.
What follows is the detail the law requires us to give you.
Who we are
JOAD is a trading name of Pinekor Limited, a company registered in England and Wales, no. 17389269. Registered office: 17 Partridge Close, Northampton, NN2 8BL.
Contact for anything about your data: privacy@justoneaday.app · ICO registration number: ZC233346
We are the data controller. That means we are the organisation legally responsible for your information.
We have not appointed a Data Protection Officer, because the law does not require one for an organisation like ours. Write to the address above instead.
What we collect
Three things. You type in the last two, and only if you choose to.
| What | What it is |
|---|---|
| The access log | For each request: the address your internet connection is using (your IP address), the date and time, the page or file you asked for — including any words you typed into the blog’s search box — whether it worked, which browser you are using, and the page you came from if you followed a link |
| Your email address, if you ask to be told when signup opens | The address you type into the waiting-list form, and a record of the four things you ticked when you did — that you are 18 or over, that you agree to the Terms of Use, that you have read this notice, and that you consent to our holding your address in connection with a dating product open to people in non-monogamous relationships as well as monogamous ones |
| Your email address, if you ask to hear about new blog posts | The address you type into the form on the blog page, which version of the form’s wording you agreed to, and when. Then, for each new post, a record that we emailed it to you. To stop the form being used to fill the list or to send floods of email, we also keep a scrambled form of the address your connection was using for a day at most, and it cannot be turned back into that address |
If you search the blog, the words you typed are part of that request, so they sit in the log beside your IP address, for ninety days at most like everything else in it. We do not store them anywhere else.
Your IP address counts as personal data under UK law, even though it usually identifies a connection rather than a person. That is why this notice existed before the waiting list did.
There is nothing else. No name, no age, nothing about what you are looking for, no account and no payment details. The website has no way to reach the member database and no password for it, and that is checked when the site is built rather than promised here. If you later become a member, nothing joins your place on this list to your member record. The blog’s list is kept in a store of its own, apart from the waiting list, and nothing joins the two. The same address can be on both, because you put it there twice.
Why we have it, and what allows us to keep it
| Why | What allows it |
|---|---|
| Running the website: keeping it available, stopping it being attacked or abused, and working out what went wrong when something breaks | Legitimate interests — UK GDPR Article 6(1)(f). The interest is running a website that works. We have weighed it against your privacy: the log is short-lived, it is never used to identify anybody, and a website cannot be run safely without one |
| Understanding how the site is used — which pages people read, how they found us, and how much traffic there is — so that we can make it better | Legitimate interests — UK GDPR Article 6(1)(f). The interest is knowing whether the site is any good. We have weighed it against your privacy, and three things decide it: we look at totals, never at individuals; we do not use a cookie or any tracking code to do it, only the log the server already writes; and nothing about it leaves this company. What we learn is “forty people read the safety page this week”, never anything about you |
| Emailing you once, on the day signup opens | Your consent — UK GDPR Article 6(1)(a). You asked us to, and you can change your mind by writing to hello@justoneaday.app |
| Emailing you when there is a new post on the blog | Your consent — UK GDPR Article 6(1)(a). You asked us to, and you can change your mind by following the link in any of those emails, or by writing to hello@justoneaday.app |
| Stopping the blog’s form being used to fill the list or to send floods of email | Legitimate interests — UK GDPR Article 6(1)(f). The interest is a list that only holds people who asked to be on it. The scrambled entry lasts a day at most and identifies nobody |
| Holding an email address in connection with a dating product open to people in non-monogamous relationships | Your explicit consent — UK GDPR Article 9(2)(a). Knowing that somebody is interested in a product like this may say something about their private life, so the law asks for a separate, explicit yes. That is the fourth tick, and it stands on its own |
Consent means you can take it back, and taking it back is one email. Write to hello@justoneaday.app and we delete your address. It does not undo anything we did while you were on the list, which is nothing beyond holding the address. For the blog’s list, the link at the foot of every email does the same thing straight away.
Four things we never do with it, whatever we are counting. We never build a profile of you. We never follow you to another website. We never sell or share it, and no advertiser sees any of it. And we never try to work out who you are — if we wanted to know which person read a page, this log could not tell us and we would not ask it.
Cookies and tracking
This website sets one cookie, and only if you ask it to. At the foot of every page there is a switch between the light and the dark version of the site. If you press it, we store your choice on your device so that the site looks the same the next time you come. If you never press it, nothing is stored at all.
It is called joad_theme, it holds one word — light or dark — it lasts a year, and it is readable
only by this website. It says nothing about who you are.
There is nothing else. No analytics, no advertising tag, no social media widget and no embedded content from anybody else.
That is why you have not been asked to agree to a cookie banner. Under the Privacy and Electronic Communications Regulations, a site only has to ask when what it stores is not needed for something you asked it to do. Pressing that switch is asking, so this one does not need a banner — but it does need describing, which is what this section is.
The four ticks on the waiting-list form are a different thing — they are about our holding your address, not about anything being put on your device.
Every page shows all of its content with JavaScript turned off. The switch is the only thing on this site that needs it, and without it the site simply follows whatever light or dark setting your device already has.
This changes when the blog gets comments. When it does, this notice changes with it and you will be asked.
Who else sees it
Linode, the company we rent the machine from, because the log is written on their machine. They act only on our instructions and are not allowed to use it for anything of their own.
Resend, the company that sends our email, if you leave an address. They see your address and the words of each message, in order to deliver the waiting list’s confirmation and announcement and the blog’s new-post emails. They keep a copy of each message they send for a period their own terms set. Resend is a company based in the United States and sends through Amazon Web Services. They act only on our instructions.
Nobody else. We do not sell it or share it. Where it goes outside the United Kingdom — to Resend, and where Linode’s own support arrangements require — it is covered by the UK International Data Transfer Agreement or equivalent safeguards.
We will hand it over if the law requires us to — a court order, or a police request we are obliged to answer.
How long we keep it
The log: ninety days at most. After that it is deleted automatically. The web server does the deleting itself, so it happens whether or not anybody remembers, rather than depending on a note somebody has to act on.
Your email address: until signup opens, and then not at all. We send the one announcement and delete the whole list. It does not become a mailing list. An address that is never confirmed goes within 24 hours — a sweep runs every hour and deletes anything older than 23, so it always beats the promise the confirmation email makes.
Your address on the blog’s list: until you follow the link in one of our emails, or ask us to delete it. Following the link deletes it at once, together with our record of which posts we sent you. Resend’s copies of messages already sent are kept for the period their terms set.
Why ninety days. Long enough to look back at a month that went wrong and still be inside the window, and short enough that we are not keeping a record of visits nobody will ever look at.
Your rights
You can ask us to:
- show you what we hold about you
- correct it if it is wrong
- delete it
- stop using it, or limit what we do with it
- object to us holding it, because we rely on legitimate interests
- take back your consent to our holding your email address, at any time
Write to privacy@justoneaday.app. We answer within one month.
To come off the waiting list, hello@justoneaday.app is the quicker address and it is the one printed beside the form and in every email we send to the list. Either reaches us. To come off the blog’s list, follow the link in any of its emails.
Be aware of one practical limit. To find your entry in a log we would need the IP address you were using and roughly when you visited. Without both we may not be able to find anything, and we will tell you so rather than guess.
If you are unhappy with how we have handled this
Tell us first at privacy@justoneaday.app and we will try to put it right.
You can also complain to the Information Commissioner’s Office, which is the UK regulator for data protection. You do not have to come to us first.
Information Commissioner’s Office · ico.org.uk/make-a-complaint · 0303 123 1113
What this notice does not cover
| Where | Which notice |
|---|---|
The app at app.justoneaday.app |
It is not open yet. When it opens it has its own notice, and that one covers this website too |
The guided tour at tour.justoneaday.app, which the homepage links to |
A separate notice, shown before you give it anything. It describes a service holding one email address |
The waiting list is handled by the machine behind
tour.justoneaday.app, because that is where the one store of email addresses lives — one store, one set of consent records, one confirmation email. It is the same organisation and the same promise, and this notice covers what happens to your address whichever page you typed it on. The tour’s own notice describes the same store.
Changes to this notice
If we change it we change the version number and the date at the top. The current version is always the one published on the website.