daytor

Privacy Policy

Last updated October 7, 2026

This policy explains what Corra LLC, which operates daytori (“we,” “us”), collects when you use daytori.com, why, who else handles it, and the choices you have. It covers the website and the emails we send. Using daytori is also governed by our Terms of Service.

The short version: we collect what we need to run your account and show you good places, most of what you post is public by design, we don’t sell your information, and you can ask us to delete it at any time.

1. Information we collect

Information you give us

  • Account details. You sign in with Google or with your email address. If you use Google, Google tells us your name, email address, profile photo and a Google account ID, and we never see your Google password. If you use your email, we store the address and, if you set one, your password. We only keep the password in a securely hashed form, so we can’t read it. The one-time sign-in codes we email you stop working once used or after an hour.
  • Profile. The display name, profile photo and home city you choose, which parts of your profile are visible to others, and your email preferences.
  • What you post. Reviews, star ratings, photos, date-night plans, check-ins, spots you suggest and edits you propose to a spot’s details.
  • What you do with other people’s content. Saves, likes, follows, “helpful” votes and reports of content that breaks the rules.
  • Things you type into a feature. Search terms, quiz answers, and the bio you paste into the For Them planner.
  • Messages to us. Your name, email and message when you contact us or send a partnership inquiry.

Information collected automatically

  • Activity. Which spots, plans and events you view, save, share or click through to, and which search results you choose. If you’re signed in, this is linked to your account. If you aren’t, it’s linked to a random session ID stored in a cookie (see Cookies and local storage).
  • Technical data. Your IP address, browser and device type, and the pages you request. We use it to limit abuse, keep the site secure and fix errors. Our hosting provider also keeps standard server logs.
  • Analytics. We use Google Analytics to see how people use daytori as a whole: which pages get viewed, how people found us, what kind of device they use, and roughly where they are (city or region). It identifies your browser with a random ID stored in a cookie, not with your name or account (see Cookies and local storage).
  • Advertising measurement. We buy ads for daytori on Meta (Facebook and Instagram) and on Google Search. If you arrive from one of those ads, the link carries an ID that tells us which ad you clicked. Meta’s pixel then reports back to Meta which pages you viewed on daytori and whether you did things like sign up or save a plan, and Meta can match that to your Facebook or Instagram account if you have one. We use it to see which ads work and to show daytori ads to people who have visited before. You can turn this off — see Your privacy choices. For Google Search ads we only count conversions: Google Analytics tells Google Ads that a click on one of our ads later led to something like a sign-up. We’ve switched off the settings that would let Google use this to personalize ads or build audiences to target, so there it is counting, not targeting.
  • Approximate location, only if you allow it. If your browser shares your location, we use it on your device to pick the nearest city we cover. The coordinates stay on your device. We only store the city.

Information about places

Spot listings, hours, photos and ratings come from our own research, public sources such as the venue’s website and listing services, and our community. This information is about businesses, not about you.

2. How we use it

  • To run your account, sign you in, and show your reviews, plans and saved spots back to you.
  • To publish what you choose to post, and to work out community ratings and trending lists.
  • To personalize what you see, such as your city, recommendations and suggested plans.
  • To send you notifications about your account and activity, which you can switch off (see below).
  • To understand which features and places people use, so we can improve search and recommendations.
  • To measure whether our ads work, and to show daytori ads to people who have visited before or whose interests resemble theirs.
  • To moderate content, respond to reports, and prevent spam, fraud and abuse.
  • To comply with the law and enforce our Terms.

We don’t use your information to make decisions that have legal or similarly significant effects on you.

3. What other people can see

daytori is a community, so a lot of what you do here is meant to be seen.

  • Always public: your display name, profile photo, reviews, ratings and review photos, plus how many people you follow and how many follow you.
  • Never public: who you follow and who follows you. The counts show on your profile, but the lists themselves are yours alone — nobody else can open them.
  • Public by default: spots you’ve added to daytori. You can hide them from your profile in settings.
  • Private by default: your saved spots and saved plans. You can show them on your profile in settings.
  • Date-night plans are private unless you change them. Unlisted plans can be opened by anyone who has the link. Public plans appear on daytori, in search engines, and can be copied by other people to use as a starting point.

Photos are published as you upload them, including any information stored in the image file, such as the location where it was taken. If you don’t want that shared, turn off location tagging in your camera or remove it before you upload.

Public content can be indexed by search engines and copied by others before you delete it. We can’t pull back copies that other people or services have already made.

4. Who we share it with

We don’t sell your personal information. We do send Meta information about what you do on daytori so we can advertise there, which California law calls “sharing for cross-context behavioral advertising.” You can turn that off at any time — see Your privacy choices. Apart from that, we share your information only in these cases:

  • Service providers that run parts of daytori for us. They may use it only to provide their service to us:
    • Supabase: sign-in and database
    • Vercel: website hosting
    • Cloudflare: photo storage and delivery
    • Resend: sending email
    • OpenAI: reads search terms to improve results, and the bio you paste into the For Them planner to suggest a night. We don’t send your name or account details with that text.
    • Google: sign-in with Google, Google Analytics for measuring how the site is used, and Google Ads, which Analytics tells when an ad click led to a sign-up or another action we count. Google signals and ads personalization are switched off for that link, so Google can measure our ads with it but can’t personalize ads to you or build audiences from what you do here. It doesn’t receive your name or email address (see Cookies and local storage)
  • Meta, for advertising. Unlike the providers above, Meta also uses what it receives for its own purposes, which is why we list it separately. It gets the pages you viewed on daytori, the actions you took, your IP address and browser details, and the ad ID if you came from one of our ads. If you’re signed in, it also gets your email address and your account number scrambled into a fixed code — Meta can check that code against the accounts it already holds, which is how it tells which of its users came from an ad, but it can’t read your address back out of it, and we never send the address itself. It doesn’t get your name, your reviews, or anything else you’ve written here. Meta’s privacy policy covers what it does with it, and Your privacy choices explains how to stop it.
  • Other people on daytori, for the content described in What other people can see.
  • Legal reasons. When the law requires it, or when we believe in good faith that it’s needed to protect someone’s safety or rights, including ours, or to investigate fraud or abuse.
  • Business transfers. If daytori is merged, acquired or sold, your information may transfer as part of that deal. This policy will still apply to it.
  • With your consent, or when you ask us to.

We may publish aggregate statistics, such as how many people saved a spot this week. These don’t identify you.

When you follow a link to a venue’s website, a ticket seller or a map, that site’s own privacy policy applies.

5. Cookies and local storage

We use a small number of cookies and browser storage. The last three items on this list involve someone else receiving data: Google Analytics, Google’s sign-in window, and Meta’s advertising pixel. Meta’s is the only one used to target ads at you, and the only one you can switch off from inside daytori — see Your privacy choices. The Google ones measure our ads and our traffic; they aren’t used to target you.

  • Sign-in cookies (sb-…-auth-token). These keep you signed in. They’re required, and daytori can’t keep you signed in without them.
  • Session ID (dn_session_id). This is a random ID that counts views and saves when you aren’t signed in. It lasts up to one year.
  • Local storage (datenight.city, datenight_quiz_v1). These remember your chosen city and your quiz progress on this device. They never leave your browser unless you use the feature they belong to.
  • Analytics cookies (_ga, _ga_…). Google Analytics sets these on daytori to tell visits from the same browser apart. They last up to two years. They’re loaded through Google Tag Manager, which means Google receives your IP address and browser details, but Google Analytics doesn’t store IP addresses. Analytics is linked to our Google Ads account so an ad click can be matched to a later sign-up, but Google signals and ads personalization are switched off, so this data isn’t used to personalize ads to you or to build audiences to target. To opt out, use Google’s opt-out browser add-on or block cookies from daytori in your browser. Blocking them won’t affect how the site works for you.
  • Advertising cookies (_fbp, _gcl_au). Meta’s pixel sets _fbp to recognize your browser across visits, for up to three months. When you click one of our ads, Meta also passes a click ID in the link (fbclid), which we store for the rest of that visit so the pixel can report the click back. Together these tell Meta which of our ads led to a sign-up, and let us show ads to people who have already been here. Google’s tag sets _gcl_au for up to three months when you arrive from one of our Google ads, which carry their own click ID in the link (gclid); that pair is what lets Google count a click that later became a sign-up, and it isn’t used to target you. Blocking any of them won’t affect how the site works for you.
  • Google’s sign-in button. When you open the sign-in window, the “Sign in with Google” button loads from Google. Google receives your IP address and browser details when it loads, and may use its own cookies, for example to show which Google account you’re signed into. This happens only when the sign-in window is open, and Google’s privacy policy covers it.

You can clear cookies and site data in your browser settings. If you do, you’ll be signed out and your city choice will reset. We honor the Global Privacy Control signal: if your browser or an extension sends it, we don’t load the advertising pixel at all. Browser “Do Not Track” headers have no agreed meaning, so we don’t rely on them — use Global Privacy Control or the opt-out in Your privacy choices instead.

We don’t show other companies’ ads on daytori itself. If that changes, we’ll update this policy before it goes live and describe the choices you’ll have.

6. Emails

We email you about things that involve your account, such as a spot you suggested going live. Every email has an unsubscribe link, and you can turn email off in your profile settings. Some emails aren’t optional because your account depends on them: sign-in and confirmation codes, security notices such as a password change, and messages about these policies.

7. How long we keep it

  • We keep your account and profile until you delete your account.
  • When you delete your account, we delete your profile, plans, saves, likes, follows and notifications. Your reviews, ratings and photos stay on spot pages without your name, because other people’s ratings depend on them. If you want those removed as well, tell us and we’ll delete them.
  • We keep activity and search data after that, but it’s no longer linked to you. We use it only in aggregate.
  • We keep security logs, error logs and rate-limit records only as long as we need them to protect the service and fix problems.
  • Deleted data may stay in encrypted backups for a limited time before those backups are overwritten.

8. Your choices and rights

  • Edit your profile, your visibility settings and your email preferences at any time from your profile.
  • Edit or delete your reviews (along with their photos) and your plans.
  • Get a copy, fix something, or delete your account: email support.daytori@corralimited.com from the address on your account. We’ll confirm the request came from you and reply within 30 days.
  • Location: you can revoke location access in your browser settings at any time.

We won’t treat you differently for using any of these rights.

Your privacy choices

To stop daytori sending your activity to Meta for advertising, use Your Privacy Choices, linked at the bottom of every page. We remember the choice in a cookie on that device, so you’ll need to set it again in another browser or after clearing your site data. You can also switch advertising cookies off for every site that honors it by turning on Global Privacy Control in your browser or with an extension — we honor that signal automatically, with no opt-out needed.

Separately, Meta lets you limit how it uses data that other websites send about you, in the ad preferences for your Facebook or Instagram account. That setting covers every site, not just ours.

Google’s conversion counting isn’t a separate tag we can switch off for you, because it rides on the same Google Analytics tag that measures the site. To stop it, use Google’s opt-out browser add-on or block cookies from daytori. You can also turn off personalized ads across all of Google in My Ad Center — though we already have personalization switched off at our end for everything daytori sends.

California residents

California law gives you the right to know what personal information we collect, use and disclose, to get a copy of it, to correct it, to delete it, and to opt out of its sale or sharing. You can use these rights by emailing support.daytori@corralimited.com. You can also have an authorized agent act for you, if they show us your written permission. Section 1 of this policy lists what we collect, and Section 4 lists who receives it. The categories are identifiers, customer records, internet activity, approximate geolocation (city only), photos, and the content you post.

We don’t sell personal information. We do share one category — internet activity, meaning the pages you viewed and what you did on them — with Meta for cross-context behavioral advertising, as Sections 4 and 5 describe. To opt out, use Your Privacy Choices or send a Global Privacy Control signal; both are described in Your privacy choices. We don’t use sensitive personal information to infer things about you.

If you’re outside the United States

daytori is operated by Corra LLC from the United States, and your information is stored and processed there. If data protection laws such as the GDPR apply to you, these are our legal bases for using your information:

  • running the service you asked for (contract)
  • improving and securing it (legitimate interests)
  • meeting legal obligations
  • your consent, where we ask for it, such as for location

daytori covers cities in the United States, and we serve the site only to visitors there — requests from other countries are blocked before they reach us. So in practice we don’t collect anything about you, and nothing about you reaches Meta or Google Analytics.

You have the right to access, correct, delete, restrict or object to our use of your information, and to data portability. You can withdraw consent at any time and complain to your local data protection authority.

9. Children

daytori is not for children under 13, and we don’t knowingly collect information from them. If you think a child under 13 has given us information, email support.daytori@corralimited.com and we’ll delete it.

10. Security

We use HTTPS for all traffic, store passwords only as secure hashes, and limit access to personal data to the people who need it to run daytori. We email you when your password changes, so you’ll know if someone else changed it. No service can guarantee perfect security. If a breach affects your information, we’ll notify you as the law requires.

11. Changes to this policy

When we change this policy, we’ll update the date at the top. If a change materially affects how we use your information, we’ll tell you by email or with a notice on daytori before it takes effect.

12. Contact

Questions, requests or complaints about privacy: support.daytori@corralimited.com.