Skip to main content

Privacy Policy

Last updated: August 18, 2026

This Privacy Policy explains how Delulu ("we," "us," or "our") collects, uses, and protects your information when you use our website and services. We are committed to protecting your privacy and being transparent about our data practices.

1. Information We Collect

Information you provide

  • Name and email address — when you manifest a product, create an account, or subscribe to our newsletter.
  • City — provided during checkout to generate your package's starting location.
  • User-generated content — comments, suggestions, product ideas, and display name changes you submit.

Information collected automatically

  • Usage data — pages visited, features used, time spent on the platform, and interactions (such as products manifested and achievements unlocked).
  • Device information — browser type, operating system, screen size, and device identifiers.
  • Cookies and local storage — used for session management, theme preferences, cart contents, and authentication.
  • IP address — used for rate limiting, security, and general analytics.

2. How We Use Your Information

  • To provide and operate the Delulu platform, including generating journeys, tracking XP, and delivering email updates.
  • To send you journey update emails, achievement notifications, daily reward reminders, and other platform-related communications you've opted into.
  • To maintain security, prevent abuse, and enforce rate limits.
  • To improve the platform based on usage patterns and feedback.
  • To display the leaderboard (using your display name — email addresses are never shown publicly).

3. What We Do NOT Do

  • We do not sell, rent, or trade your personal information to third parties.
  • We do not collect payment information — Delulu is entirely free and has no payment system.
  • We do not use your data for targeted advertising profiles.
  • We do not share your email address with other users — the leaderboard shows display names only.

4. Cookies

We use cookies and local storage for the following purposes:

  • Essential cookies — session management, authentication, CSRF protection. These are required for the platform to function.
  • Preference cookies — dark/light mode setting, sound preferences, cart contents. These remember your choices.
  • Analytics cookies — if we use analytics services, these help us understand how the platform is used. They do not identify you personally.

You can disable cookies in your browser settings, but some features (like authentication and the cart) may not work correctly without them.

5. Third-Party Services

We may use the following third-party services:

  • Email delivery — to send journey updates and notifications (via SMTP or a transactional email provider).
  • Web push notifications — if you opt in, we use the Web Push API to send browser notifications about journey events.
  • Image hosting — product images may be served from third-party image services such as Pexels.
  • Advertising — we may display ads via Google AdSense or similar services. These services may use cookies to serve relevant ads. See Google's advertising policies for details.

6. Data Retention

We retain your account data (name, email, XP, achievements) for as long as your account is active. Email logs are automatically deleted after 90 days. If you wish to delete your account and all associated data, contact us at the email address below.

7. Data Security

We implement appropriate technical measures to protect your data, including encrypted connections (HTTPS), hashed passwords, Content Security Policy headers, rate limiting, and input sanitization. However, no method of transmission over the internet is 100% secure.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or restrict certain processing.
  • Data portability — receive your data in a structured format.
  • Withdraw consent for optional communications (email notifications can be managed in your dashboard).

To exercise any of these rights, contact us at privacy@delulu.jalpi.com.

9. Children's Privacy

Delulu is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:
privacy@delulu.jalpi.com