Privacy Policy
Document Revision: 07/28/2026
§ 1What We Collect
When you sign in with Google, we receive your name, email address, and profile photo. Stewards additionally provide identity verification information and bank account details via Stripe — Daybreak never stores raw banking or government ID data; it goes directly to Stripe. We store Action content (descriptions, photos, videos) that you upload. We store pledge records (amounts, Stripe payment intent IDs) for accounting and dispute resolution.
§ 2How We Use Your Data
Your data is used exclusively to operate the Daybreak platform: to display your Actions, process payments, send you status notifications, and resolve disputes. We do not sell your data to third parties. We do not use your data for targeted advertising based on your personal profile.
§ 3Analytics & Advertising Measurement
Daybreak uses two analytics services to understand how the platform is used and to measure the effectiveness of our marketing campaigns. Neither service has access to your financial data or government ID.
Google Analytics 4 (GA4). We use Google Analytics to collect anonymized data about page views, feature usage, and user flows (for example, how many visitors complete a pledge or create an Action). GA4 uses first-party cookies and may use aggregated device/browser signals. No personally identifiable information is sent to Google. You can opt out via the Google Analytics Opt-out Browser Add-on or your browser's cookie controls. Google's privacy policy is at policies.google.com/privacy.
Meta Pixel (Facebook/Instagram). We use the Meta Pixel to measure whether our advertising campaigns on Facebook and Instagram result in real-world outcomes (such as a Steward posting their first Action). The Pixel records standard events like page views and checkout completions. Meta may associate this data with your Facebook profile if you are logged in. To opt out, visit facebook.com/adpreferences or use a browser extension that blocks Meta Pixel. Meta's data policy is at facebook.com/privacy/policy.
Both services load after the page is interactive and can be blocked by ad-blocking browser extensions without affecting core platform functionality.
§ 4Third-Party Services
Daybreak uses Supabase for database and authentication infrastructure, Stripe for payment processing and identity verification, Vercel for hosting, Google Analytics for usage analytics, and Meta Pixel for advertising measurement. Each of these services has its own privacy policy. Data processed by Stripe is subject to Stripe's privacy policy.
§ 5Public Content
Action titles, descriptions, before photos, location names, and proof videos are publicly visible. Steward first names and verified status are publicly visible on Action pages. Your email address is never displayed publicly.
§ 6Data Retention
We retain account data for as long as your account is active. Completed Action records and pledge ledger entries are retained for a minimum of 7 years for accounting and legal compliance. You may request deletion of your account and personal data at any time by contacting us, subject to legal retention requirements.
§ 7Cookies
We use HTTP-only session cookies managed by Supabase to keep you signed in. Google Analytics 4 sets its own first-party cookies (prefixed _ga) to distinguish unique visitors. We do not use advertising retargeting cookies beyond what is described in §3.
§ 8Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. Residents of the European Economic Area and California have additional rights including the right to object to processing and the right to data portability. Contact us at the email on our platform to make such requests.
§ 9Changes
We will notify registered users of material changes to this policy via email. Continued use of the platform after notification constitutes acceptance.