Privacy Policy
Last updated: 22 September 2026
This Privacy Policy explains how Delulu ("we," "us," or "our") collects, uses, and protects your information when you use our website and services. We are committed to protecting your privacy and being transparent about our data practices.
1. Information We Collect
Information you provide
- Name and email address — when you manifest a product, create an account, or subscribe to our newsletter.
- City — provided during checkout to generate your package's starting location.
- User-generated content — comments, suggestions, product ideas, and display name changes you submit.
Information collected automatically
- Usage data — pages visited, features used, time spent on the platform, and interactions (such as products manifested and achievements unlocked).
- Device information — browser type, operating system, screen size, and device identifiers.
- Cookies and local storage — used for session management, theme preferences, cart contents, and authentication.
- IP address — used for rate limiting, security, and general analytics.
2. How We Use Your Information
- To provide and operate the Delulu platform, including generating journeys, tracking XP, and delivering email updates.
- To send you journey update emails, achievement notifications, daily reward reminders, and other platform-related communications you've opted into.
- To maintain security, prevent abuse, and enforce rate limits.
- To improve the platform based on usage patterns and feedback.
- To display the leaderboard (using your display name — email addresses are never shown publicly).
3. What We Do NOT Do
- We do not sell, rent, or trade your personal information to third parties.
- We do not collect payment information — Delulu is entirely free and has no payment system.
- We do not build or sell advertising profiles about you ourselves. We do display third-party advertising — see Section 5 for how our advertising partners use cookies, and how to control that.
- We do not share your email address with other users — the leaderboard shows display names only.
4. Cookies
We use cookies and local storage for the following purposes:
- Essential cookies — session management, authentication, CSRF protection. These are required for the platform to function.
- Preference cookies — dark/light mode setting, sound preferences, cart contents. These remember your choices.
- Analytics cookies — if we use analytics services, these help us understand how the platform is used. They do not identify you personally.
You can disable cookies in your browser settings, but some features (like authentication and the cart) may not work correctly without them.
5. Third-Party Services
We may use the following third-party services:
- Email delivery — to send journey updates and notifications (via SMTP or a transactional email provider).
- Web push notifications — if you opt in, we use the Web Push API to send browser notifications about journey events.
- Image hosting — product images may be served from third-party image services such as Pexels.
- Advertising — see Section 5a below.
5a. Advertising and Google AdSense
Delulu is free to use and is funded by advertising. We use Google AdSense to display ads on this site.
- Google, as a third-party vendor, uses cookies to serve ads on this site.
- Google's use of advertising cookies (including the DoubleClick DART cookie) enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
- Third-party vendors and ad networks may also use cookies, web beacons or similar technologies to collect information such as your IP address, browser type, the pages you view and the time you spend on them. We do not control these technologies and we do not receive the data they collect.
- We do not provide your name, email address or any other directly identifying information to advertisers.
Your choices: you may opt out of personalised advertising by visiting Google Ads Settings, or opt out of participating third-party vendors at aboutads.info/choices and optout.networkadvertising.org. Opting out does not remove ads — it means the ads you see are less relevant to you.
If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent before any non-essential advertising or analytics cookie is set, and you can change or withdraw that choice at any time through the consent settings link in the site footer.
For full details, see Google's advertising policies and How Google uses information from sites that use its services.
6. Data Retention
We retain your account data (name, email, XP, achievements) for as long as your account is active. Email logs are automatically deleted after 90 days. If you wish to delete your account and all associated data, contact us at the email address below.
7. Data Security
We implement appropriate technical measures to protect your data, including encrypted connections (HTTPS), hashed passwords, Content Security Policy headers, rate limiting, and input sanitization. However, no method of transmission over the internet is 100% secure.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Object to or restrict certain processing.
- Data portability — receive your data in a structured format.
- Withdraw consent for optional communications (email notifications can be managed in your dashboard).
To exercise any of these rights, contact us at privacy@delulu.jalpi.com.
9. Children's Privacy
Delulu is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.
11. Contact Us
If you have questions about this Privacy Policy or your data, contact us at:
privacy@delulu.jalpi.com