Privacy policy

This is a draft for legal review, not final legal text. Griefdream is built so that what you write stays as private as we can make it. This page explains what we collect, where it lives, and for how long.

What we collect, and where it lives

When you write a dream and answer the questions Griefdream asks, that text, and the reading itself, is never stored in our database. Instead:

• It stays in your own browser.
• It lives in Redis, a temporary data store, for at most 24 hours from when you start a session, and then it is deleted automatically.
• If you paid, a keepsake PDF of your reading is stored in private cloud storage for 30 days, then deleted automatically. It is not publicly accessible. Only a short-lived link we generate for your session can retrieve it.

Our database stores only these records, never your dream text, your answers, or the reading:

• a random session identifier,
• when the session was created and how many turns it used,
• a short list of general themes your dream touched on, for example "water" or "falling",
• a two letter country code, worked out from your IP address by our hosting provider,
• how many tokens the AI model used and what that cost us,
• and, if you paid, a record of the payment.

The session identifier does not identify you by itself. If you paid, it is linked to the payment record, and Stripe holds the details you gave at checkout, such as your name, email, and card. We never see or store your full card number.

We keep these database records for [DATABASE RECORD RETENTION PERIOD].

If you ask us to email you the keepsake PDF, we use the email address from your payment to send it, and we store that address on the payment record. Otherwise we never store an email address.

We use your IP address briefly to limit how many sessions can be started from one address, or from the service overall, as a safeguard against abuse. That record expires within about an hour and is never stored alongside your session. Our hosting provider also processes IP addresses in its own request logs as part of running the site.

Cookies

Griefdream uses a small number of cookies.

• A session cookie that holds nothing but an encrypted session identifier, so the site knows which conversation is yours. It carries no dream content.
• Once bot protection (Cloudflare Turnstile) is turned on, a cookie it sets to confirm a submission is coming from a person, not a script. It is not active yet.
• If you are the site operator, separate cookies for the admin console. These are never set for an ordinary visitor.

We do not run any analytics or tracking scripts on Griefdream today.

Who we share information with

We use a small number of service providers to run Griefdream, each of whom receives only what they need to do their job.

• Vercel hosts the site, processes requests (including IP addresses), and stores the keepsake PDF in private storage.
• Neon hosts our Postgres database, which holds the records listed above.
• Upstash hosts the temporary Redis store your dream text passes through.
• Anthropic provides the AI model that reads your dream and writes the reading. Your dream text and answers are sent to Anthropic's API to screen them and to generate the reading, and Anthropic's own commercial data retention policy applies to that text once it reaches them. [VERIFY: ANTHROPIC RETENTION AND TRAINING TERMS]
• Stripe processes the one-time payment and holds the details you enter at checkout.
• Resend delivers email, only if you ask us to email you your keepsake. To do that it receives your email address and the PDF itself, which contains your dream and reading.
• Cloudflare Turnstile checks that a submission is coming from a person, once it is turned on.

We do not sell your information, and we do not share your dream text with anyone beyond what this section describes.

Safety screening

Every submission is screened automatically before it is read. If the screening shows a risk of self-harm, a loss by suicide, or a threat to another person, the submission is not read, and you see a short message instead. We never keep the text of a screened-out submission. We only record a tag describing which kind of screen it was, so we can see how often each one happens. This applies even if you had already paid: a paid session stopped this way is refunded automatically.

No accounts

Griefdream does not require or offer an account. Your dream, answers, and reading are deleted from Redis 24 hours after your session starts, and the keepsake PDF 30 days after it is made. To ask about the records we keep, or to request deletion of them, write to [CONTACT EMAIL]. [LAWYER NOTE: CONFIRM WHICH PAYMENT RECORDS MUST BE KEPT FOR TAX OR ACCOUNTING REASONS BEFORE PROMISING DELETION.]

Children's privacy

Griefdream is not directed at children. It is intended for people [MINIMUM AGE] years old or older. [LAWYER NOTE: CONFIRM COPPA APPLICABILITY AND WHETHER ADDITIONAL CHILDREN'S PRIVACY LANGUAGE IS NEEDED HERE.]

Your rights

[LAWYER NOTE: ADD ANY STATE PRIVACY RIGHTS THAT APPLY, FOR EXAMPLE ACCESS AND DELETION REQUESTS, AND HOW TO MAKE THEM.]

Not therapy, not a crisis service

Griefdream is not therapy, not medical or mental health advice, and not a crisis service. Dream interpretation is not a science. If you are thinking about harming yourself, you can call or text 988 to reach the Suicide and Crisis Lifeline, any hour, at no cost.

Changes to this policy

We may update this policy as the service changes. The date at the top of this page shows when it was last updated.

Contact

Questions about this policy, or requests about your data, can be sent to [CONTACT EMAIL].