Privacy Policy

Dream Grid ("we", "us", "our") lets people share a dream and place it on an interactive world map. This policy explains what information we collect, why, and what choices you have. We've tried to write it in plain language rather than dense legal text.

1. Who we are

Dream Grid is operated by [Full legal name], a sole proprietorship (eenmanszaak) registered in the Netherlands under KVK number [KVK number], VAT/BTW number [BTW number], trading as "Dream Grid."

Registered business address: [Business address]. You can reach us at hello@dreamgrid.ink for any question about this policy or your data.

2. What information we collect

Account information

• Email address and password (used to create and secure your account)

Profile information (all optional)

• Nickname, a short bio, and links to your social media — you choose whether to fill any of this in

Dream content

• The title, description, photo, video link, and gallery photos you add to your dream
• The map location (coordinates) you choose to place your dream at

Payment information

• We do not collect or store your card details. Payments are handled entirely by PayPal — we only receive confirmation that a payment was completed.

Technical information

• Basic session data needed to keep you signed in (via secure browser storage), and standard server logs (like IP address) generated by our hosting provider

Contact form

• If you use our contact form, we collect the name, email address, and message you provide, so we can reply to you.

3. Why we collect it

We only collect what's needed to run Dream Grid:

• To provide the service — your email and password let us create your account; your dream content is what you're publishing on the map.
• With your consent — anything optional (nickname, bio, social links, photo) is only used because you chose to add it, and you can remove it at any time.
• To communicate with you — for example, password reset emails, purchase and cancellation confirmations, replying to your contact form message, or relaying a message from another user through "Contact the Dreamer."
• Legitimate business interest — basic technical logs help us keep the site secure and working.

4. Anonymity & your responsibility for content

We do ask that content follows the law and doesn't impersonate real people or organizations without their consent.

5. Content review & reporting

We reserve the right to review content — including photos, videos, and gallery images — before or after it's published, and to remove anything that violates our Terms of Service.

If we become aware of content that appears to depict or facilitate child sexual abuse, we remove it immediately and report it to the relevant authorities, as required by law.

6. Third-party services we use

To run Dream Grid, we rely on a small number of trusted service providers. Each only receives the data it needs to do its job:

• Supabase — database, account login, and photo storage
• PayPal — payment processing
• Resend — sending emails (password resets, dreamer contact messages)
• Mapbox — the interactive map
• Vercel — website hosting and privacy-friendly, cookie-free analytics

We don't sell your personal information to anyone, and we don't share it with advertisers.

7. International data transfers

Dream Grid is used by people around the world, and the service providers listed above may process data outside your own country — including in the United States. Where this involves transferring data out of the EU/EEA, our providers rely on recognized legal safeguards (such as Standard Contractual Clauses) to protect it. By using Dream Grid from any country, you understand your information may be processed internationally as described in this policy.

8. Your rights (EU / UK / EEA users)

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data ("right to be forgotten")
• Export your data in a portable format
• Object to or restrict certain processing

To use any of these rights, contact us at the email below — we'll respond within one month of your request.

You also have the right to lodge a complaint with your local data protection supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

9. Your rights (California / US users)

If you're a California resident, the CCPA/CPRA gives you similar rights: to know what personal information we collect, to request deletion, to correct it, and to opt out of the "sale" or "sharing" of personal information.

We will not discriminate against you for exercising any of these rights.

A note for users in Asia and elsewhere

Privacy laws vary widely across Asian countries (for example Japan, South Korea, Singapore, and India each have their own frameworks). Dream Grid applies the same protections described in this policy to all users globally, as a consistent baseline, regardless of where you're located.

10. How long we keep your data

We keep your account and dream content for as long as your account is active. If you delete your account, we remove your profile and personal information within a reasonable time, with these exceptions:

• Payment and accounting records — kept for 7 years, as required by Dutch tax law (bewaarplicht).
• Contact form messages — kept for up to 12 months after your message, or until your enquiry is resolved, whichever is longer.
• Content moderation reports — kept for as long as needed to review the report and act on it, and afterwards for a reasonable period in case of a follow-up dispute.

11. Cookies & local storage

Dream Grid does not use advertising or tracking cookies. We use only the minimum browser storage needed to keep you signed in to your account, plus Vercel Web Analytics — a cookie-free analytics tool that reports only aggregated, anonymous traffic statistics (like page views and general location by country) and never identifies individual visitors.

12. Age requirement

Dream Grid is intended for people 18 years of age or older. We ask you to confirm this when you create an account. If we learn that someone under 18 has created an account, we will remove it.

13. Security

We use industry-standard practices to protect your data, including encrypted connections (HTTPS) and access controls on our database. No method of storage or transmission is 100% secure, but we take reasonable steps to protect your information.

14. Changes to this policy

We may update this policy as Dream Grid grows. We'll update the "Last updated" date at the top of this page when we do. Significant changes will be noted on the site.

15. Contact us

Questions about this policy or your data? Reach us at hello@dreamgrid.ink.