Legal
Privacy
Last updated October 18, 2026
This policy covers deskdaemon.com, the Desk Daemon email list, and the tools Desk Daemon uses to post to and read its own social accounts. Desk Daemon is run by Chad (an individual creator today; this page will name the business once it is formed). Chad decides what is collected and why, and is responsible for it. Questions or requests: howdy@deskdaemon.com, or by mail to Desk Daemon, PO Box 23, Maxwell, TX 78656.
The short version
- No ads, no ad trackers, no cookies set by this site, and your data is never sold or shared for advertising.
- Your email address is used only for the emails you signed up for, and you can leave in one click.
- Page and link counts are totals, not records of who you are.
If you sign up (on the home page, the free page or the Daemon Kit waitlist), your email address goes to Buttondown, the email service Desk Daemon uses. Buttondown sends you a confirmation email first: nothing else is sent until you confirm. Along with your address, Buttondown records which page you signed up on (and, if a link in a Desk Daemon post or message brought you there, which one), when, and the IP address the request came from (proof that you asked, and protection against people signing up others). Your address is used only to send what you signed up for (new posts, guides, the Kit waitlist) and is kept until you unsubscribe, which you can do from any email in one click. The legal basis is your consent; you can withdraw it at any time.
A hidden field in the form exists only to catch bots and is never shown to people. To stop abuse, the form also keeps a counter tied to your IP address for two minutes, then deletes it.
The free guides are for subscribers: once you confirm your email, you're taken to the page with both downloads.
Analytics and link counts
The site uses Vercel Web Analytics, which is cookieless: it doesn't set cookies, doesn't fingerprint you and doesn't follow you to other sites. It reports page-view totals. Clicks on/go/<slug> links are added to a daily total per link (and, for links shared in a post, per post) so Chad can see which posts get clicks. No IP address, cookie or identifier is stored with those totals, and they are deleted after 120 days. The legal basis is Desk Daemon's legitimate interest in knowing which pages and posts are useful.
Like any website host, Vercel processes the technical details of each request (such as IP address and browser type) to deliver the site and keep it secure, underVercel's privacy policy.
The home page remembers your motion and sound settings in your own browser (local storage). That stays on your device and is never sent anywhere.
Desk Daemon's own publishing tool uses Instagram's official API to post to the @deskdaemon account and to read the comments people leave on its posts. Comments are read to find questions worth answering and, when a post asks you to comment a word to get a link, to send you one direct message with that link (one per person per post). Your comment text and username are stored on Chad's own computer, never shared or sold, and deleted after 90 days. Only Desk Daemon's own posts are read. The legal basis is Desk Daemon's legitimate interest in answering comments on its own posts, and the link is sent because you asked for it.
YouTube
The same tool uses YouTube API Services to upload videos to the Desk Daemon YouTube channel and to read that channel's own video statistics and the public comments people leave on its videos. By watching or commenting on those videos you're using YouTube, so theYouTube Terms of Service and theGoogle Privacy Policy apply there.
Comments are read only to find questions worth answering in a future video. The comment text and commenter's display name are stored on Chad's own computer, never shared or sold, and deleted after 30 days. This website only links to Desk Daemon's own videos: no YouTube comments or viewer data are published here, and no YouTube data is used for advertising. Only the channel owner signs in to this tool with Google, and access can be revoked at any time from Google's security settings.
TikTok
Desk Daemon reads its own TikTok account's videos and their statistics through TikTok's official API, to confirm posts went live and to count views. Posts are published from TikTok Studio. Comments and viewer data on TikTok are not collected.
The same tool uses Pinterest's official API to create pins on Desk Daemon's own Pinterest account and boards, each linking back to a Desk Daemon post or page, and to read those pins' own statistics (impressions, saves, pin clicks and outbound clicks) to see which ones are useful. It doesn't read anyone else's pins, boards or profile, doesn't collect comments or viewer data, and doesn't use Pinterest data for advertising. Only Desk Daemon's own account signs in, and access can be revoked at any time from Pinterest's settings.
Getting, correcting or deleting your data
Email howdy@deskdaemon.com to ask what Desk Daemon holds about you, to correct it, to have it deleted, or to object to how it's used. For a comment, include your username and the post; for the email list, send it from the address you signed up with. Requests are answered within 30 days. You can also delete a comment on Instagram or YouTube yourself; the copy here is removed when the 90- or 30-day window ends, or sooner on request. Unsubscribing from any email removes you from sending straight away.
Depending on where you live (for example the EU, the UK, or US states such as California), you may have further rights, including data portability and the right to complain to your data protection authority. Desk Daemon does not sell or share personal information for targeted advertising, so there is nothing to opt out of; a Global Privacy Control signal is respected all the same.
Who handles the data
- Vercel: hosts the site and its analytics.
- Buttondown: stores the email list and sends the emails.
- Upstash (through Vercel): keeps the daily link totals and the two-minute signup counter.
- Meta, Google, TikTok and Pinterest: run the platforms Desk Daemon posts to; their own policies apply there.
These services are based in the United States, so your data may be processed there. Each provides safeguards for international transfers in its own terms. Nothing else is collected beyond what's described here.
Children
This site and its email list aren't meant for children under 13 (under 16 in the EU), and Desk Daemon doesn't knowingly collect their data. If you think a child has signed up, email the address above and it will be deleted.
Security
The site is served over HTTPS only, the email list sits with Buttondown, and the publishing tool runs on Chad's own computer behind a sign-in. No system is perfectly secure, but access is kept to what each part needs.
Changes
When this policy changes, the date at the top changes too. A change in what's collected or why will also be announced to the email list before it applies.