Privacy policy
Data We Collect
- Email address — Required for account creation and password recovery
- Password — Stored securely using one-way hashing (we cannot see it)
- Username — Optional, for display purposes, to replace your email in the top navbar
- Dream journal data — Your dream entries (title, description, notes, date, mood, type, time, recall, favorite status), linked symbols, and custom symbol images you upload (stored on AWS S3)
- Usage analytics — Anonymous data via Google Analytics
Why We Collect It
- Email/Password — To authenticate you and recover your account
- Dream journal data — To provide the core journaling service
- Analytics — To understand how people use the app and improve it
Legal Basis (GDPR)
We process your data based on: (a) Contract — to provide the service you signed up for, and (b) Legitimate interest — for anonymous analytics to improve the service.
Data Retention
- Your data is kept as long as your account is active
- When you delete your account, your data is removed immediately. Automated backups may retain data for up to 90 days before being overwritten.
- Inactive accounts may be deleted after 2 years (with notice)
Your Rights
- Access — Export all your data from Settings
- Rectify — Edit your profile and dreams anytime
- Delete — Delete your account from Settings
- Portability — Download your dreams as PDF
- Object — Analytics are anonymous and not tied to your account. You can block Google Analytics using browser extensions such as Google's official opt-out add-on
Third-Party Services
- AWS S3 (US) — Stores custom symbol images
- Google Analytics (US) — Anonymous usage statistics
- Google reCAPTCHA — Spam protection on signup
- Gmail — Sends transactional emails (welcome, password reset)
International Transfers
Some data may be processed in the United States through our service providers (AWS, Google). These transfers are protected by Standard Contractual Clauses and the providers' privacy frameworks.
Cookies
- Session cookie — Keeps you logged in (essential, prefix:
dreamingsheep.*) - Google Analytics cookies — Anonymous usage statistics (optional, can be blocked with browser extensions)
- Google reCAPTCHA cookies — Spam protection during signup (loaded only on signup page)
Security
We use HTTPS encryption, secure password hashing, and regular backups. However, no system is 100% secure. We recommend using a unique password.
Contact
For privacy questions or to exercise your rights: meh@dreamingsheep.net
The Fun Stuff
Now that the lawyers are satisfied, here's the human version...
Email and password
With great password comes low responsibility.
Google Analytics data
Technically it is possible to track your every move, the question is, is it worth it? (Hint: it is not.) We are using it anonymously for improving the UI/UX.
Cookies
We collect the cookies for the Cookie Monster from the Sesame Street only. In return he helps us in session management.
²
Dreams
Not only we stalk your dreams, we are going to steal your soul bwahaha! Jokes aside, we are too busy fulfilling our own dreams but if you are a Paranoid Android¹ and don't trust us, it's best to keep your journal in a notebook.
Terms of Service
By signing up, you have already sold your soul to dreamingsheep. The Terms of Service just makes it official. Don't worry — we accept returns within 90 dream-days, no receipt needed.
1 - Radiohead - Paranoid Android
2 - © FERNANDEZ - gegen den Strich
Long time no sleep?â„¢