Skip to main content
Home

Legal · Privacy Policy

Privacy Policy

Effective 2026-05-14

Summary

DreamForge Imagine collects the minimum data required to run an authenticated AI thumbnail studio. We store your account profile and your generated content in our own database and storage; we send your prompts and reference images to OpenAI for processing; we let Polar handle payments. We do not sell your data.

1. Data we collect

Account data. When you register we store your name, email, password hash (if you use email + password), and a random user id. If you sign in with Google, we additionally store your Google account id and any profile picture URL Google provides.

Wallet and ledger. Your DreamCrystal balance and every credit or debit (signup bonus, purchase, generation, refund) are stored as ledger rows in our database.

Uploaded media. Avatar references, reusable assets, and one-off references you upload are stored in Vercel Blob and referenced from our database.

Prompts and generated images. The prompts you write and the resulting generated thumbnails are stored with your account and shown in the Library.

Operational data. Standard server logs (request paths, timestamps, IP addresses, user-agent strings) are kept by our hosting provider for a limited time.

2. How we use it

We use the data above to:

  • ◆Authenticate you and keep your session secure.
  • ◆Process payments and credit your wallet when a Polar order is paid.
  • ◆Send your prompts and reference images to the AI model that generates the thumbnails.
  • ◆Show you your Library, history, and balance.
  • ◆Diagnose problems and improve the Service. We do not use your prompts or generated images to train any AI model.

3. Third parties we share data with

We rely on the following processors. Each handles a specific slice of data under their own terms.

ServiceWhat they see
VercelHosts the app; sees request logs and stores uploaded / generated media in Vercel Blob.
NeonHosts the Postgres database (account, wallet, ledger, media metadata).
OpenAIReceives your prompts and reference images to generate thumbnails.
PolarHandles checkout and payment processing; sees your email and billing details you enter during checkout.
GoogleIf you sign in with Google, Google authenticates you and shares your email + profile with us per OAuth.

We do not sell, rent, or trade your personal information to any third party for advertising.

4. Storage and access

Account, wallet, and ledger data live in our Neon Postgres database. Uploaded and generated images live in a public Vercel Blob bucket — their URLs contain random UUIDs and are unguessable, but anyone with a URL can read the file. Treat generated thumbnails as "shareable artwork", not as secret data.

We retain account data for as long as your account is active. You can request deletion at any time (see Section 6).

5. Cookies and sessions

We use a single first-party session cookie set by Better Auth to keep you signed in. It is HTTP-only, secure in production, and carries no advertising or tracking payload. We do not use third-party analytics or advertising cookies.

6. Your rights

You can ask us to:

  • ◆Export your data (your account row, ledger, prompts, and media URLs).
  • ◆Correct inaccurate data on your account (you can also do this yourself from the Profile page).
  • ◆Delete your account and the data associated with it. We will honour deletion requests within 30 days, except where we are legally required to keep records (e.g. payment receipts).

Emailsupport@dreamforgeworld.com for any of the above.

7. Children

The Service is not directed at children under 13. If you believe a child has created an account, contact us and we will delete it.

8. Changes to this Policy

We may update this Privacy Policy as the Service evolves. Material changes will be announced on the Service or by email to your account address.