Privacy

Last updated: August 31, 2026.

Who is responsible

todayis.lol is operated by Josiah Maraat, an individual in the Philippines. Email: support@todayis.lol.

What we collect

• A visitor cookie (“visitor”) that identifies your browser.
• The destination you submit (a link or an X @handle), the category and amount you choose, and your email address.
• The public name, description, and image we read from that destination in order to build your listing.
• Payment confirmation identifiers from Dodo Payments.
• Click records, with your IP address hashed before we store it.
• The email address you use to pin a day, and the 6-digit code we send to verify it.
• Your consent to the follow and daily emails: the time you gave it, whether it came from a pin or a claim, and an unsubscribe token for each.
• Page view counts, with your IP address hashed before we store it. These are fallback counters for when our analytics provider is unavailable.
• Technical data collected by Vercel and DataFast, such as browser and approximate location.
• Any message you send us.

Cookies

The “visitor” cookie is strictly necessary: it attaches a checkout to your browser and dedupes clicks. The “pinner” cookie is also strictly necessary: once you verify a pin, it holds that verified email address, signed, so you can pin another day without a new code. Both last 1 year. DataFast’s analytics script runs without cookies. Your device’s theme preference, if any, is stored in your browser and is never sent to us.

Why

We process this data because it is necessary to provide the listing you paid for (contract); to keep counters accurate and prevent abuse (legitimate interest); to keep records the law requires (legal obligation); and, for any email you opt into, because you consented (consent).

Public listings

Listings, their prices, their history, and their click counts are public and indexable by search engines. Fetching a listing’s metadata (title, description, favicon, image) reveals our request to that site’s server. Pin emails are never public.

Who we share with

Dodo Payments, DataFast, Resend, Vercel, Convex, Cloudflare, and Google’s favicon endpoint, each for the part of the service they run. We may also share data with our advisers, with authorities where the law requires it, or with a buyer of the business if that happens.

We do not sell your personal data.

Some of these providers may process data outside your country, including in the United States. We rely on their standard contractual safeguards for that transfer.

Retention

• The “visitor” and “pinner” cookies last 1 year.
• Verification codes expire after 10 minutes and are deleted.
• Page view hashes are kept for 30 days.
• Listings are public and permanent by design.
• Payment confirmation identifiers are kept as long as accounting requires.
• Click hashes are kept while they remain useful for dedupe and rate limiting.
• A removed listing may remain in backups for a limited time.
• We keep your consent record for as long as we email you. If you unsubscribe, we keep your address on a suppression list so we do not email you again.

Your rights

Under the GDPR and the Philippine Data Privacy Act, you can ask to access, correct, or delete your personal data, object to certain processing, or ask for a portable copy of it. Email support@todayis.lol; we answer within 30 days. You can also complain to your local data protection authority, or in the Philippines to the National Privacy Commission.

Children

You must be 18 or older to use this service. We do not knowingly collect data from anyone younger.

Changes

We may update this policy. The date at the top shows the last update.