Privacy

This page sets out what Gentle Moments keeps, why, and for how long. It covers this site only. Dilli House's other websites have their own. In short:

• Sharing or reporting a moment never asks for your name, email address or an account.
• A person reads every moment before it appears.
• You can ask for your moment to be taken down at any time.
• The pages you read set no cookies and do not track you. We never sell your information.

Who we are

Gentle Moments is run by Dilli House Ltd, registered in England and Wales (company number 15899845), registered office 5–7 Buck Street, Camden Collective, London NW1 8NJ. Dilli House Ltd is responsible for your information (the controller). It is registered with the Information Commission's Office (ICO), number ZB863778.

Write to Arpit Kaushik, Director, at hello@dilli.house.

If you share a moment

We keep what you write, your photograph if you add one, the words you agreed to, and when the moment was sent, published or taken down.

Your photograph is redrawn on your device before it is sent. The original file never leaves your device. We keep three copies, with no location or camera details.

Some moments touch on health, faith or private life. Leave out anything that could identify you or anyone else. If a moment could identify someone, we trim it or decline it.

Sharing is your choice. A moment needs What I noticed and the tick. Without them, we cannot take it.

If you give us a moment yourself

You can also give Arpit a moment directly, by email or in person. He types it in only once you have agreed in writing to the same words as the tick on Share. That agreement shows who you are, so we keep it apart from the site, for as long as the moment; nothing published shows who gave it. You can send a photograph with it, if you took it yourself, under the same rule as Share: no faces or names. We publish only a redrawn copy, with no location or camera details. Your email keeps the photograph as you sent it, with any location your phone added, for as long as the moment.

If a moment mentions you

A moment may mention someone else: a daughter, the man at the bakery. We publish it because we have a legitimate interest in sharing everyday moments. We leave out anything that could identify you. If a moment says anything about another person's health, religion or beliefs, ethnic background, or sex life or sexuality, we publish it only if no one could tell who they are.

If you think a moment is about you, press Report on it and say why, or write to us.

If you report a moment

A report holds which moment it is about, the time, your note if you write one, whether it took the moment down, and what Arpit decided. Nothing in it says who you are, so we cannot reply. Only Arpit reads the notes. Keep yours to what we need to know.

If you only read

The pages you read set no cookies and load nothing from other websites. Your browser keeps a copy of each page for a short while, as browsers do. The site's one cookie keeps Arpit signed in to its editor, for 12 hours.

Our host, Netlify, sees each visitor's internet address and browser, and records each request, including sending a moment or report, to run and protect the site. Netlify sets out its own use of these records at netlify.com/privacy.

Internet addresses

The site never stores your internet address. To stop spam, it turns the address into a code, scrambled with a key that changes every day. It counts how often each code shares, reports or tries to sign in to the editor. Until the key is deleted, a code could be traced back to your address, and matched by its time to the moment or report you sent. So we treat the codes as personal information. The key and the codes are deleted every night.

Why we use it

UK data protection law asks for a reason, a lawful basis, for each use:

• Publishing your moment, here, in Dilli House's letters, and in the guide and its later editions: your consent, given with the tick on Share, or in writing if you give us your moment yourself. Letters were first named in the tick on 2 November 2026. A moment shared before then goes in a letter only if its writer agrees again.
• Anything your moment says about your health, religion or beliefs, ethnic background, or sex life or sexuality: your explicit consent, given in the last sentence of the tick on Share, which names these, or in the same words in writing.
• Publishing what a moment says about someone else: our legitimate interest in sharing everyday moments.
• Keeping the words you agreed to, and any written agreement: our legitimate interest in being able to show that you agreed.
• Reading, correcting and declining moments: our legitimate interest in checking every moment before it appears.
• Taking down illegal content, and reporting child sexual abuse or exploitation material to the National Crime Agency: our legal duty under the Online Safety Act.
• Address codes and Netlify's records: our legitimate interest in protecting the site.
• Reports and the log: our legitimate interest in handling reports and showing we meet our Online Safety Act duties.
• Emails: our legitimate interest in replying, or our legal duty when you use your rights. If an email tells us about an intimate image, a crime or someone's health, we use it only to deal with that.

No one profiles you. No machine alone makes a decision with a legal or similarly serious effect on you. Automatic checks only turn away moments sent by machines, and limit how often one address can share or report.

Who sees it, and where

• Anyone who visits: published moments, never when they were sent or published. Search engines list them, and link previews show a moment's first words and any photograph. Those services keep their own copies, which can stay for a while after a takedown.
• Readers of the printed guide, which Dilli House prints itself: the moments chosen for it.
• Readers of Dilli House's letters, and the service that sends them for us: the moments chosen for them, never with a name.
• Arpit: everything, in the site's private editor, and any copy saved for the guide or a letter. No one else at Dilli House has access.
• Netlify, Inc., our host, and the companies it lists as subprocessors at netlify.com/trust-center.
• HEY, our email service, run by 37signals LLC, and the companies 37signals lists as subprocessors for HEY at 37signals.com/policies/privacy/hey-subprocessors: emails to us. 37signals keeps mail mainly in the United States.

We share nothing else unless the law requires it. We never sell your information.

Apart from emails, Netlify's own records and any copy saved for the guide or a letter, which stays on Arpit's computer, everything the site keeps is stored in Frankfurt, Germany, and handled by Netlify's computers in the United States. Published moments are copied to Netlify's servers around the world for up to an hour, and kept by readers' browsers for up to five minutes. A takedown clears Netlify's copies within seconds.

UK law approves transfers to the EU, including Germany. For the United States, UK regulations approve transfers to companies certified to the UK Extension to the EU–US Data Privacy Framework. Netlify is certified. 37signals, which runs HEY, is not, so its data processing agreement uses the UK Addendum to the EU standard contractual clauses, published at 37signals.com/policies/privacy/dpa. Write to us for a copy.

How long we keep it

• Moments waiting to be read: until published or declined, and no more than 60 days after they last began waiting.
• Declined or removed moments, with their photographs: deleted straight away. The one exception is child sexual abuse or exploitation material. The law requires us to report it to the National Crime Agency, keep it and the records about it for a year after reporting, and keep the report's reference number for five years.
• Published moments and their photographs: until taken down, or until the site closes.
• Moments taken down by a report: until Arpit puts them back or removes them, within seven days.
• Written agreements for moments given to us directly: as long as the moment.
• Report notes: 12 months after the report is dealt with.
• The log of each step in a moment's life, and reports apart from their notes: kept for good, as our record under the Online Safety Act. They hold only which moment, what happened and when. No words, names or addresses.
• Address codes and their key: deleted every night.
• Emails: 12 months after our last reply, or longer if a complaint or legal claim needs them. An email that holds your agreement to publish a moment is kept as long as the moment. After we delete an email, HEY can keep copies in its systems and backups for up to 90 days.
• A copy saved for the guide or a letter: until that edition goes to print or that letter is sent, then deleted.
• Netlify's own records and backups: Netlify does not publish how long it keeps these for a site like this one. We have asked, and will update this page when we hear.

Deletions run each night, so they can take a day longer, or longer still if a run fails or does not finish.

Your rights

You can ask for a copy of your information, or ask us to correct it, delete it, limit its use, or send it to you in a common format.

You can withdraw your consent at any time. Press Report on your moment and say it is yours, or write to us about one still waiting. A published moment comes off the site, usually at once and otherwise within two days. Then we delete it, here and from any copy saved for the guide or a letter, and leave it out of any later printing or letter. Search engines may take longer to drop it. Copies already printed, and letters already sent, cannot be called back.

We never ask for names, so tell us the moment's words, its web address, or roughly when you sent it. If you say a moment is yours, we take it down without asking you to prove it. For anything else, we may not be able to confirm it is yours, and will say so.

Write to hello@dilli.house. We reply within one month. If a request is complex, we may take up to two months more, and will tell you why within the first month.

Your right to object

You can object at any time to any use that relies on our legitimate interests. Write to hello@dilli.house and we will stop, unless we have compelling reasons that outweigh yours, or need it for a legal claim.

Age

Anyone may read. To share a moment, you need to be 13 or over. If you are under 18 and unsure, talk to a parent, carer or teacher first. We do not check ages, and treat every moment with the same care. We decline a moment that seems to come from someone under 13. If we learn that a moment came from someone under 13, we take it down and delete it. We do the same if a parent or carer asks.

Complaints

If you are unhappy with how we handle your information, write to hello@dilli.house. We will reply within 14 days, look into it, keep you informed, and tell you the outcome.

You can also complain to the Information Commission's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. We would like the chance to put things right first, but you can go to the ICO at any time.

Changes

Any change to this page appears here with a new date. No change will lower the protection of a moment already shared.

Last updated: 2 November 2026