Privacy Policy

This Privacy Policy explains what information Project Dreambox (“we,” “us”) collects at projectdreambox.com, how we use it, and the choices you have. It applies together with our Terms of Service.

1. Information you give us

• Account details: your email address and password (stored securely by our authentication provider; we never see your password in plain text).
• Google sign-in: if you continue with Google, we receive your name, email address and profile photo from Google. We do not receive your Google password or access to your Gmail, contacts or files.
• Profile: your name, username, location, bio, profile photo and the resources you can offer others.
• Dreams and activity: dreams, descriptions, cover photos and videos, goals, amounts raised, updates you post, team applications and the messages in them, and dreams you follow.
• Messages to us: anything you send when you contact us.

2. Dreams recorded at the Dreambox booth

Before this website, people recorded short video statements of their dreams at the Dreambox video booth at festivals and events. For some recordings we hold the email address the person gave at the time. We use that email only to invite the person to claim their dream on the site, and we keep it private: it is never shown on the site or shared. Until a dream is claimed, it may appear on the site with a first name or initial. If you recorded a dream and would like it edited or removed, or you don't want to be contacted, email ted@infinitstudios.com.

3. Information collected automatically

• Sign-in cookies: we use essential cookies to keep you logged in. The site doesn't work without them.
• Analytics: we use Vercel Web Analytics and Speed Insights to understand page views and site performance. They count visits without using cookies and without building profiles of individual visitors.
• Logs: our hosting and database providers keep standard technical logs, such as IP address, browser type and request times, for security and troubleshooting.

We don't sell your personal information, and we don't use advertising trackers.

4. What's public

Your profile (name, username, photo, location, bio and what you can offer), your dreams, goals, updates, the number of followers each dream has and the members of each dream's team are public and can be seen by anyone. Your email address, team applications and the messages in them, and your account settings are not public. Only you and the managers of the dream you applied to can see your application.

5. How we use information

• To run Project Dreambox: create your account, show your dreams and profile, and let you follow, join and help dreams.
• To send account emails, such as sign-up confirmations, email change confirmations and, for recorded dreams, invitations to claim them.
• To recommend similar dreams, based on categories and the kinds of goals involved.
• To keep the site safe, prevent fraud and abuse, and enforce our Terms.
• To understand how the site is used and improve it.
• To comply with the law.

6. Who we share it with

We share information only with service providers that help us run the site, under their own privacy and security terms:

• Supabase: database, sign-in and file storage.
• Vercel: website hosting and privacy-friendly analytics.
• Google: only if you choose to sign in with Google.
• OpenStreetMap (Nominatim): only if you click “Locate me” on your profile. Your browser sends your approximate coordinates to OpenStreetMap to look up your town; we store only the town name you save.

We may also share information if required by law, to protect the safety and rights of people using Project Dreambox, or as part of a merger, acquisition or sale of the project, in which case this policy will continue to apply to your information.

7. How long we keep it

We keep your information while your account is active. When you delete your account, we delete or anonymize your personal information within 30 days, except where we need to keep it to comply with the law, resolve disputes or prevent abuse. Copies in backups are removed on the normal backup cycle. Content you contributed to someone else's dream, such as team updates, may remain without your name attached.

8. Your choices and rights

• You can view and edit your profile, dreams and account email in Settings.
• You can ask us for a copy of your information, to correct it, or to delete your account by emailing ted@infinitstudios.com.
• Depending on where you live (for example, the EU, UK or California), you may have additional rights, such as objecting to certain uses or complaining to your local data protection authority. We will honor these rights as the law requires and will not treat you differently for using them.

9. Security

We use encrypted connections (HTTPS), secure password storage and database rules that limit who can read or change each piece of data. No system is perfectly secure, so please use a strong, unique password and tell us right away if you think your account has been compromised.

10. Children

Project Dreambox is not meant for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has created an account, contact us and we will delete it.

11. International users

Project Dreambox is run from the United States, and your information may be stored and processed in the United States and other countries where our service providers operate.

12. Changes to this policy

We may update this policy as the site changes, for example when we add payments. We'll update the date above and, for important changes, let you know by email or on the site.

13. Contact

Questions or requests about your privacy? Email ted@infinitstudios.com.