Legal
Privacy Policy
Effective July 22, 2026
Private by default
DreamSketch is designed as a private journal. We do not sell personal information or share it for cross-context behavioral advertising. We process personal information to provide the service, protect it, complete payments, and respond to you.
Information we collect
- Account information, including your email address, authentication provider, display name, consent records, and internal user identifier.
- Private journal information, including dream text, dates, selected people, speaking targets, names, tags, and relationship descriptions.
- Private media and generated content, including reference photos, three-view references, Dream Cards, images, and Dream Insights.
- Sharing information, including private share tokens, selected share content, visits, broad acquisition-source categories, rewards, and revocation status.
- Optional homepage gallery submissions, including a snapshot of the selected Dream Card image, its title, review status, and moderation records.
- Usage and security information, including IP address, device or browser details, timestamps, request logs, error logs, rate-limit signals, and privacy-safe feature events.
- Anonymous daily visit counts. A random browser marker is used only to avoid counting the same browser more than once per Los Angeles calendar day; it is not linked to dream content or used for cross-site advertising.
- Credits and payment records, including balances, ledger entries, package, price, currency, PayPal order or capture identifiers, payment status, and refund status. DreamSketch does not receive your full card or bank credentials.
How information is collected
We receive information directly from you, automatically from your device when you use the service, from Supabase when you authenticate, and from PayPal when you start or complete a payment, refund, reversal, or dispute.
How we use information
We use information to authenticate you; save and organize dreams; connect dreams to people; store private media; generate requested AI content; create and revoke private shares; operate credits and rewards; process purchases and refunds; prevent abuse; diagnose failures; protect accounts; comply with law; and respond to support or privacy requests.
AI processing
When you request an AI feature, DreamSketch sends the minimum relevant prompt, dream details, selected people context, or selected reference image to OpenAI to produce the requested result. We do not send all account data by default. AI providers process submitted data under their own service terms and data-handling commitments. Do not include information you do not want processed for the requested generation.
Service providers
DreamSketch uses Vercel for the Web application, Render for the API, Supabase for authentication, PostgreSQL, and private object storage, OpenAI for requested AI generation, and PayPal for payments. These providers receive information only for the functions they perform and may process it in the United States or other locations allowed by their terms.
Private sharing
A private share link exposes only the selected Dream Cards and, when you choose it, a Dream Insight snapshot. It does not expose original dream text, internal user IDs, original person photos, or three-view reference assets. Anyone with an active link may view and copy its contents, so share only with people you trust and revoke links when they are no longer needed.
Optional homepage gallery
If you opt in, we create a separate copy of the selected Dream Card image and title for review. Approved submissions are publicly visible without your name or account identifier. Editing or regenerating the source card, deleting it, or withdrawing the submission removes it from public display and deletes the gallery image copy. We retain limited review records for security and audit purposes.
Retention and deletion
Dreams, people, private media, and generated content remain until you delete them or delete your account. Share links remain active until revoked or their underlying content is deleted. Short-lived signed media links expire automatically. Payment, security, audit, fraud-prevention, and legal records may be kept after account deletion where reasonably required. Service-provider backups are removed according to provider retention cycles.
Your controls
You can edit profile information, dreams, and people; delete content; revoke share links; and request account deletion from Settings. You may request access, correction, or deletion by emailing support@dreamsketch.org. We may need to verify that the request comes from the account owner.
California privacy information
DreamSketch does not sell personal information or share it for targeted advertising. Because we do not engage in those practices, there is currently no “Do Not Sell or Share” link. We honor available access, correction, and deletion controls whether or not a particular privacy law applies. We do not discriminate against users for making a privacy request.
Do Not Track and Global Privacy Control
DreamSketch does not use advertising cookies or cross-site behavioral tracking. Browser Do Not Track and Global Privacy Control signals therefore do not change our current data practices. If those practices change, this policy and the relevant controls will be updated before the new use begins.
Security
We use encrypted transport, authenticated APIs, ownership checks, private storage, short-lived media access, access restrictions, and other administrative and technical safeguards. No online service can guarantee absolute security, so protect your account and contact us if you suspect unauthorized access.
Adults only
DreamSketch is intended only for people 18 or older in the United States. We do not knowingly create accounts for children. Contact us if you believe a person under 18 has submitted personal information.
Changes and contact
We will post policy changes with a revised effective date and provide additional notice when legally required. Review this policy periodically. Privacy questions can be sent to support@dreamsketch.org. See also the Cookie Notice.
