Privacy Policy

1. Information we collect

• Dream text you type. Used to generate and (optionally) interpret your story.

• Email address — only if you sign in. Your email is your account; there is no password.

• A random device ID stored in your browser, used to count free generations.

• Payment information — handled entirely by Stripe. We never see or store your card number; we only store your Stripe customer ID and subscription status.

• Ratings and any optional feedback comment you submit.

• Technical data: IP address (used transiently for rate-limiting and bot protection) and basic analytics events (e.g. which style you picked, language, and the length of your input — not the dream text itself).

2. How we use it

To generate and continue your stories, deliver sign-in codes, run your subscription, prevent abuse and fraud, understand product usage in aggregate, and fix errors.

We do not sell your personal information.

3. Third parties that process your data (sub-processors)

• Anthropic (Claude) — receives your dream text to generate stories and interpretations.

• Replicate (FLUX) — receives short scene descriptions to generate illustrations (paid feature only).

• Stripe — payment processing and subscription management.

• Cloudflare (Turnstile) — bot/abuse protection; receives a token and your IP.

• Vercel & Upstash — hosting and our key-value data store.

• Resend — delivers your sign-in code emails.

• PostHog — product analytics (events and metadata, not your dream text).

• Sentry — error monitoring.

Each processes data only to provide its function. Review their policies for details.

4. Cookies & local storage

We use a strictly-necessary, http-only session cookie to keep you signed in. We store a device ID and your email in your browser's local storage for metering and convenience. PostHog sets analytics cookies — you can decline these via the cookie banner.

5. How long we keep it

• Shared story permalinks: up to 30 days.

• Journal entries (signed-in users): your most recent entries, up to about 1 year.

• Ratings: up to 90 days.

• Sign-in codes: 10 minutes. Sessions: 30 days.

• Rate-limit and abuse counters: transient (cleared within hours).

6. Your rights

You may request access to, correction of, or deletion of your data, and you may object to or restrict certain processing. Email supportfulfillyourdream@gmail.com and we will respond within a reasonable time. Depending on where you live (e.g. the EEA/UK under GDPR, or California under CCPA), you may have additional rights.

7. Children

The Service is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

8. Security & international transfers

We rely on reputable providers with industry-standard safeguards. Your data may be processed in countries other than your own, including the United States.

9. Changes & contact

We may update this policy; we will revise the date above. Questions or requests: supportfulfillyourdream@gmail.com.