Who runs this site and what it does with your data

This site loads nothing from a third party server. There is no analytics, no advertising, no profiling and no tracking of any kind, and that is a design decision rather than a setting that could be changed later.

Two surfaces do handle personal data, and each only once you start it yourself. The enquiry form sends us your name, your address, what you wrote and the fields you chose, so that we can answer and, where it fits, prepare a scope. The lawful basis is that the processing is necessary to take steps at your own request before a contract, together with our legitimate interest in answering people who write to us. Correspondence that does not lead to an engagement is deleted after twelve months by a routine that runs on the server, not by hand.

The client area sets one cookie, named dl_session, and only after you open a sign in link that we sent to your own address. It carries your address and an expiry, it is signed so that it cannot be edited, and it does nothing else. Because it exists only to deliver the sign in you asked for, it is exempt from consent, which is why this site has no cookie banner. The sign in link works once and stops working after thirty minutes.

If you switch on two step verification we store one more thing: a secret that your authenticator app also holds, and the hashes of your backup codes. The codes themselves are never stored, which is why they are shown only once. Switch the protection off and both are deleted the same second.

Everything is stored on a server we run ourselves at a data centre in Cologne, Germany, inside the European Union. Nothing is passed to an advertising network, a customer platform or a language model.

Outgoing mail is sent by our own service on our own server, inside the European Union. No delivery provider sits between us, so nothing you wrote is handed to a third party in order to reach you.

You may ask what we hold about you, ask for it to be corrected or deleted, object to our processing, and ask for a copy. Write to hello@daylited.com. If you think we handle your data wrongly you may complain to the Swedish Authority for Privacy Protection.

The site is built to be read with a keyboard and a screen reader. Every image carries a text alternative, every illustration carries a title and a description, contrast is checked in both the light and the dark theme, and nothing depends on colour alone.

If something here is hard to use, write to hello@daylited.com and tell us what and where. We would rather hear it than not.