Privacy notice

Daily Shop is an independent UK supermarket price-guessing game created and operated by Doju Cheriachan as a sole trader.

Doju Cheriachan is the data controller responsible for personal information processed through Daily Shop.

For privacy enquiries, contact playdailyshop@gmail.com.

These controls work straight away. They apply only to this browser on this device. If you use another browser or device, or clear this site’s data, you will need to choose again.

The site is hosted by Vercel. Like any website, Vercel receives your IP address and browser details when you load a page, so it can send the page to you and keep the service secure. We rely on our legitimate interests in delivering the site to you and keeping it secure. On our plan, Vercel keeps the site’s runtime logs for 1 hour.

To run the game we save a little information in your browser’s own storage. Your guesses, scores and streaks stay on your device and are not sent to us. The one exception: if you turn on daily reminders, your browser sends us the date of each Shop you finish (section 06).

Today’s guesses, so a game in progress survives a refresh

your browser

Your results, games played and streaks

your browser

Whether you have opened today’s Shop Gift

your browser

Your choice to stop statistics, if you make it

your browser

Markers that stop us counting the same thing twice, only while statistics are on

your browser

Your game record also notes which Shop you finished first on this device. While game statistics are on and you have not stopped them in section 02, the game also keeps small markers in your browser so the same thing is not counted twice: the date it last counted your visit, your start and your share, and which actions it has already counted during this visit. They hold no code that identifies you and are not sent to us. If you stop statistics, they are deleted. Earlier versions of the game may also have noted which return visits they counted; that note stays in your browser, is not sent to us and is no longer used. Clearing this site’s data in your browser deletes everything listed here, including your streak.

We use Vercel Web Analytics to count page visits, so we know how many people play and which pages they use, and can improve the game. We see totals, not individuals.

Nothing, unless you stop visit counting: then your choice is saved (section 04)

your browser

When a page is counted: the page address and the site you came from, together with your IP address and browser details, as with any request

sent to Vercel

Those page views, which Vercel says it uses only to give us totals by page, referring site, country, browser, operating system and device type

kept by Vercel

Visit counting does not use cookies or store anything in your browser. Vercel says it recognises a visitor only by a code made from the request, which is reset every 24 hours, so a visit cannot be linked to your visits on other days or on other websites.

We do not ask for your consent for this, because the law allows this kind of simple visit counting as long as we tell you about it and you can stop it for free. We rely on our legitimate interests in knowing how many people play, which pages they use and how the game is played, so we can improve the game. You can stop it at any time on this device (section 02).

When you stop visit counting, the counting script is told not to record any more page views from this browser, and on later visits it is not loaded at all. Loading any page still sends Vercel the ordinary request details described in section 03, because that is how the site reaches you.

Game statistics. We also count how the game is played, so we can improve it: for example how many games are started and finished each day, how many guesses they take, how close they get, and how often people share a result, open the Shop Gift, play a Past Shop or tap the Ko-fi link. We count on our own server, as daily totals only.

We also count taps on our Instagram and Facebook links at the bottom of the page: only which of the two was tapped, at most once per visit for each. Nothing from Instagram or Facebook is loaded here and nothing comes back to us from them, so a tap tells us the link was used, not that anyone followed us.

Markers that stop the same thing being counted twice (section 04)

your browser

For each counted action: what it was, which Shop (if it is about one), and one or two details from a short fixed list, such as how many guesses it took or a rough accuracy band. No cookie and no code that identifies you or your browser. As with any request, your IP address and browser details reach our host (section 03).

sent to us

Running totals for each London day, such as how many games were finished that day. We do not keep a record of each action or of who did it.

kept in our database in London for up to 2 years, then deleted

These are statistics about the game, not about you. We do not count whether you come back, your streak or when you last played. The totals are approximate: one person on two devices counts twice, automated programs can add to them, and anyone who has stopped statistics is not counted.

We do not ask for your consent for game statistics either, for the same reason as visit counting, and you can stop them in section 02. When you do, this browser stops sending game statistics straight away and the markers in section 04 are deleted.

If you tap “Remind me daily”, your browser asks whether the site may show notifications. On an iPhone, the same tap may first show how to add the game to your Home Screen.

One cookie, __Host-dailyshop-continuity, holding a random code your page’s scripts cannot read

your browser, up to 400 days

A scrambled version of that code, the push address and keys your browser gives us, the date you last finished a Shop, and a record of each reminder sent

Neon database in London

When you finish a Shop, your browser tells us which day’s challenge you completed, so we do not remind you that evening. Nothing about your guesses or score is sent. The reminder itself contains no personal information and is delivered through your browser maker’s push service (Apple, Google, Mozilla or Microsoft, depending on your browser).

We send reminders only because you asked for them (your consent). You can withdraw your consent at any time. The reliable way to do it yourself is the button in section 02: it stops reminders on this device and asks our server to delete your reminder record. The page tells you when the server has confirmed the deletion. If it cannot confirm, the page says so, and you can try again or email us. Turning off notifications for this site in your browser or phone settings stops reminders reaching you, but does not delete the record straight away (section 07).

There is no fixed period. A reminder record is deleted:

• straight away, when you turn reminders off in section 02 and our server confirms the deletion
• when we next try to send a reminder and your browser’s push service tells us the subscription has ended, or it has expired

If you turn notifications off only in your browser or phone settings, reminders stop reaching you, but the record is not deleted at that point. It is removed only when a later reminder is rejected by your browser’s push service, which may not happen straight away. If you tapped “Remind me daily” but never allowed notifications, a small record (the scrambled code and some dates) stays until you use section 02 on that browser or ask us by email to remove it.

You can support Daily Shop with a tip on Ko-fi. That happens entirely on Ko-fi’s site: nothing from Ko-fi loads on Daily Shop. Ko-fi and Stripe process your payment under their own privacy policies (Ko-fi, Stripe).

If you tip, we receive the name, email address and message you give Ko-fi. We use them only to keep records and to thank you, and we never add them to reminders or a mailing list. We keep the records of each tip that HMRC needs, such as the date and amount, because tax law requires business records (legal obligation). We keep those records for at least 5 years after the 31 January tax-return deadline for the tax year concerned. We use your name, email address and message to thank you (legitimate interests), and keep them only as long as we need them for that, unless they form part of those tax records.

Tapping the sheep at the bottom of any page opens a short form. If you send it, we receive the topic you chose, your message, the time, the Daily Shop you were looking at, the page address (without anything after a “?”) and a short reference. We do not ask for your name or email address, and we do not add your IP address or browser details to the email. Please don’t put personal details in your message.

Your message is sent through Resend, an email service, to the Daily Shop Gmail inbox. We use what you send only to look into problems you report and to improve Daily Shop. Our lawful basis is legitimate interests: hearing about problems and ideas helps us run and improve the game, and the form asks for as little as it can. We cannot reply, because we do not ask for your contact details. We keep feedback emails for up to 90 days and then delete them. If a message is about a problem we are still working on, we keep it until that problem is resolved, then delete it. Resend also keeps the content of each email and its delivery logs for 30 days.

To stop the form being misused, our server keeps a short record for each message: a code made from your IP address with a secret key (not the address itself), the date and the time. The code cannot be decoded back into your address, but someone holding the secret key could check whether a particular address produced it, so we still treat it as personal information. The record holds no message text and is used only to apply the limits on how many messages can be sent: 5 an hour from one internet connection, and a daily limit for the whole site. An automatic clean-up runs every night and deletes these records once the limits no longer need them, normally within 30 hours of the message.

After you send a message, the sheep shows a reference, such as FB-7K3Q9ABC, which you can copy. If you want us to delete your message, email playdailyshop@gmail.com and quote that reference.

Our server functions and reminder database are in London. Some of the companies involved are based outside the UK, so not everything stays in the UK. Game statistics totals are kept in the same London database. Vercel, Inc. is based in the United States. Vercel states that it complies with the UK Extension to the EU-US Data Privacy Framework, which UK law recognises as giving adequate protection for transfers to certified US organisations. Our reminder database is hosted in London by Neon, which is part of Databricks, Inc., based in the United States. Neon and Databricks may access or process the information in it from the United States and other countries. Databricks states that Databricks, Inc. and Neon, LLC comply with the UK Extension to the EU-US Data Privacy Framework. Where the Framework does not cover a transfer, Neon’s data processing terms use the EU standard contractual clauses with the UK Addendum. Resend, which delivers feedback emails, is based in the United States and stores the emails and its delivery records there. Our Resend account sends from its Ireland region, which only changes the route an email takes, not where it is stored. Resend’s data processing agreement with us covers transfers from the UK, and Resend states that it is certified under the UK Extension to the EU-US Data Privacy Framework. Our feedback inbox is an ordinary Gmail account. Google LLC, in the United States, provides it under Google’s own terms and privacy policy, and Google states that it complies with the UK Extension to the EU-US Data Privacy Framework. Ko-fi, Stripe and the push services handle information under their own terms.

Your right to object. You can object at any time to the visit and game statistics and anything else we do on the basis of our legitimate interests. For statistics, use section 02; for anything else, email playdailyshop@gmail.com.

You can also ask to see the information we hold about you, ask us to correct or delete it, or withdraw consent for reminders at any time. Email playdailyshop@gmail.com. Because we do not know who you are, we may need to ask a few questions, such as which device you used and roughly when, to find your information.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office at ico.org.uk.

If anything here changes, we will update this page and the date at the top.