Privacy policy

Overview

This policy explains how Hainan Mengyi Information Technology Co., Ltd. (“we,” “us”), operator of oneiromancy.ai, handles personal information when you use the site. It applies to the website, the dream-reading tool, account features and any related pages that link to this policy.

We try to collect only what the service needs, explain why, and give you ways to ask questions or exercise your rights. This policy is written in plain language. It is not legal advice; for a legal question about your rights, a qualified adviser is the right person to ask.

What we collect

We may collect the following categories of information:

• Account information: the email address you sign in with, the name you choose to put at the top of your letters, and sign-in records. Sign-in is a six-digit code sent to your email, or Continue with Google. There are no passwords.
• If you sign in with Google: Google shares the email address on that account and the name on it. The email identifies your account. The name is offered to you as a suggestion on the one step that asks what to call you, and it is kept only if you keep it. We never receive your Google password, your contacts or anything else in your Google account, and the profile picture on that account is not used anywhere on the site.
• Dream content: the dream you write, the answers you give in the questionnaire, the letter written back to you and anything you choose to save.
• Messages: anything you send us, including privacy requests, corrections, refund requests and feedback.
• Orders: if you buy a membership, we receive an order identifier, the email address on the order, the country and the amounts charged. We do not receive or store card numbers or other payment credentials.
• Technical information: IP address, browser and device type, approximate location derived from the IP address, pages visited, referrer and timestamps.
• Cookie and advertising information: what is stored or read through cookies and similar technologies, described below.

Dreams can reveal sensitive things: health, religion, sexuality, relationships, personal history. Share only what you are comfortable having processed, and do not include another person's private information without their permission.

How we use it

We use personal information to run the site, write and save readings, keep accounts working, answer messages, keep the service secure, diagnose problems, understand how the site is used and meet legal obligations.

If you tick the email box, we may send your letters to your inbox and, from time to time, notes on your dreams, for example when an image keeps coming back. Nothing is sent without that tick. Every email has an unsubscribe link, and you can also turn it off on your page.

We also use what we learn to improve the library and the reading experience. Advertising is served under the limited settings described below, and we never use dream content to make decisions about your access to healthcare, employment, insurance or anything else of consequence.

Cookies and advertising

The site uses cookies and similar technologies for essential functions (signing in, remembering that a guest reading has been used), preferences, security, and the measurement and advertising described on this page.

For measurement we use Google Analytics 4. It tells us which pages are visited, roughly from where and on what kind of device, and it does not receive the text of your dreams or letters. For visitors in the European Economic Area, the United Kingdom and Switzerland, analytics storage is set to denied, so no Google Analytics cookie is written for them. Elsewhere an analytics cookie is used unless you block it.

Public pages other than the home page load Google's advertising script for AdSense. We set Google's consent defaults for ad storage, ad user data and ad personalisation to denied for every visitor, in every region, so nothing on the site asks Google for a personalised ad or for a profile built from your visit. There is no cookie banner because we offer no optional advertising setting to consent to. You can still review and change your advertising settings inside Google, and your browser's cookie controls and any content blocker apply as usual.

You can block or delete cookies in your browser. If you block essential cookies, signing in and some other parts of the site will not work.

Who else processes it

These are the providers that process information for us, and what each one does: Supabase holds the database and handles sign-in, including sign-in with Google; Cloudflare hosts the site and serves it through its network; Resend delivers our email; Creem takes payment as the merchant of record; Google provides Analytics 4, the advertising on public pages through AdSense, and the sign-in used by Continue with Google; DeepSeek generates the letter when you ask for a reading. The last of these receives the text of your dream and your questionnaire answers and returns the letter.

We do not use your dreams, your letters or your account information to train any model ourselves, and we do not hand them to a provider for that purpose. A provider may process a request under its own terms; that part is outside what we can promise on its behalf.

We may also disclose information if the law requires it, to protect rights or safety, in connection with a transfer of the project, or at your direction. We do not sell personal information for money. Some advertising or analytics arrangements may count as “sharing” or “targeted advertising” under local law; the section on your rights explains your choices.

Payments

Memberships are sold by Creem, which acts as the merchant of record. Creem handles the checkout, the payment, value-added tax or sales tax where it applies, and the receipt. Card numbers and other payment credentials are processed by Creem under its own terms and privacy policy. They are not sent to us, and we do not store them.

From a paid order we receive the order identifier, the customer email, the country and the amounts. We use that information to record the purchase on your account, to provide what you bought, and to handle a refund or a question about the payment.

Legal bases

Where data-protection law requires a legal basis, we rely on one or more of the following: performance of a contract (providing the site, the readings you request and the purchases you make), legitimate interests (keeping the site secure, improving the service, preventing abuse, and the limited advertising and measurement described above), consent (marketing email you ask for, and the sensitive content you choose to submit), and legal obligation.

Where processing is based on consent, you can withdraw it at any time. Withdrawal does not affect processing that has already taken place. Unsubscribing from a letter email is the withdrawal for marketing.

How long we keep it, and how we protect it

We keep personal information only as long as the purposes above need it, unless the law requires longer. Account information stays while your account is active; dream content and letters stay with your account until you ask us to delete them, by email with “Privacy request” in the subject line (see Contact, below); technical logs are kept for a shorter period for security and troubleshooting.

A reading you ask for before signing in is held for 24 hours, so that it can be handed to your account if you sign in within that window. It is then deleted, whether or not you claimed it.

Order and tax records are kept for as long as tax and accounting law requires, which is longer than the rest of the account. They are held by Creem as seller and by us as the record of what your account bought.

We use reasonable technical and organisational measures to protect information, including access controls and encrypted transmission. No service can promise absolute security. Because your email address is the only way into your account, the single most useful thing you can do is keep that mailbox secure.

Your rights

Depending on where you live, you may have the right to access, copy, correct or delete your personal information; to restrict or object to certain processing; to withdraw consent; to receive a portable copy of information you provided; and to complain to a data-protection authority.

You may also have the right not to be treated differently for exercising these rights. To make a request, email hello@oneiromancy.ai with “Privacy request” in the subject line. We may need to verify your identity before acting. If you use an authorised agent, we may ask for proof of authorisation.

Children

The site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Where local law sets a higher age for consent to online services, that age applies. If you believe a child has given us personal information, contact us and we will take appropriate steps to delete it.

International transfers

The site may be operated using service providers in countries other than your own. Where information is transferred internationally, we use the safeguards required by applicable law, such as contractual protections, and take steps to keep the information protected.

Changes to this policy

We may update this policy to reflect changes in the service, in legal requirements or in our practices. The effective date at the top shows when the current version took effect. If a change is material, we will take reasonable steps to notify affected users. Continued use of the site after an update means the updated policy applies.