Privacy Policy.

1. Scope of this Privacy Policy

This Privacy Policy explains how SleepSpill collects, uses, stores, displays, protects, and may share information connected to the SleepSpill website and related subdomains, including the main site, auth portal, dreams platform, about page, account settings, notifications, moderation tools, reports, and support features.

By using SleepSpill, creating an account, posting content, commenting, liking, following users, uploading a profile picture, submitting a report, or contacting support, you understand that information may be handled as described in this policy.

2. Information you provide during registration

When you create a SleepSpill account, you may provide information such as:

• Username.
• Display name.
• Email address.
• Password.
• Date of birth.
• Agreement to required account terms and required account notifications.
• Optional marketing or update email preference.

Passwords are stored as password hashes, not as plain-text passwords. SleepSpill does not need to know your actual password after it is created.

3. Date of birth and 16+ age eligibility

SleepSpill requires users to be at least 16 years old to create an account. SleepSpill may collect your date of birth during registration to confirm age eligibility.

Your date of birth is used for account eligibility, safety, and policy enforcement. It is not meant to be publicly displayed on your SleepSpill profile.

Date of birth is locked after registration and cannot be changed from account settings. This helps prevent age-rule abuse and protects the integrity of safety decisions. If a date of birth was entered incorrectly, you must contact SleepSpill support for review.

4. Information you add to your account

After registration, you may add, change, or create account information such as:

• Profile picture or avatar.
• Short profile bio.
• Profile visibility settings.
• Follower/following visibility settings.
• Profile statistics visibility settings.
• Email address updates, where available.
• Password updates.
• Account deletion requests.

Some details may be editable from account settings, while other details may be locked for security, safety, moderation, or identity consistency. For example, date of birth is locked, and username changes may not be available at launch.

5. Dream posts and content you create

SleepSpill may store and display content you create or submit, including:

• Dream titles.
• Dream body text.
• Dream type/category.
• Mood labels.
• Intensity values.
• Lucid dream markers.
• Recurring dream markers.
• Comment settings.
• Post timestamps and update timestamps.
• Comments and comment edits.
• Profile bio text.
• Reports, appeals, and support messages.

Do not post private information, sensitive personal details, identifying information about other people, or anything you do not want others to see.

6. Information created through your activity

SleepSpill may create or store information based on how you use the platform, including:

• Likes and unlikes.
• Follows and unfollows.
• Follower and following relationships.
• Public profile statistics.
• Notification records.
• Suggested-profile or discovery signals.
• Reports submitted by you or about you.
• Moderation review status and staff actions.
• Login, session, verification, and password reset activity.
• Rate limit and anti-abuse activity records.
• Account creation, update, deletion, suspension, or status-change timestamps.

7. Public information

SleepSpill is a public dream-sharing platform. Depending on your settings and how features work, the following may be visible to users or visitors:

• Your username.
• Your display name.
• Your profile picture or avatar.
• Your profile bio.
• Your public dream posts.
• Dream categories, moods, lucid/recurring labels, timestamps, and visible post details.
• Comments you post on public dreams.
• Follower count, following count, dream count, total likes, and other profile statistics if visible.
• Follower/following lists if you choose to show them.
• Role or rank labels if displayed by the site.

Public content may be viewed, copied, quoted, screenshotted, shared, indexed, cached, or saved by other people. Deleting content later may not remove copies that others already created outside SleepSpill.

8. Private or restricted account information

Some information is not intended to be publicly displayed, including your email address, password hash, date of birth, verification tokens, password reset tokens, session information, internal moderation notes, report review details, private staff notes, and certain security records.

This information may still be visible to authorized SleepSpill staff or systems when needed for account management, security, moderation, support, safety review, debugging, or legal compliance.

9. Cookies, sessions, and cross-subdomain login

SleepSpill uses cookies or similar browser storage to keep users logged in, protect sessions, remember authentication, support CSRF protection, and allow login to work across SleepSpill subdomains such as the main site, auth portal, dreams site, and about page.

If you disable cookies, account features such as login, posting, commenting, liking, following, notifications, reports, and settings may not work correctly.

10. Verification, password reset, and security tokens

SleepSpill may create and store tokens for email verification, password reset, account recovery, and account security. These tokens are used to confirm account ownership, reset passwords, verify emails, and protect accounts from unauthorized access.

You should not share verification links, password reset links, security codes, or account recovery information with anyone.

11. How SleepSpill uses information

SleepSpill may use information to:

• Create, verify, secure, and manage accounts.
• Confirm age eligibility and enforce the 16+ requirement.
• Display public dream posts, comments, profiles, likes, follows, and profile statistics.
• Operate profile privacy settings and account settings.
• Send required account emails such as verification, password reset, security, moderation, service, and policy notices.
• Send optional updates only when you opt in where required.
• Generate notifications for account and community activity.
• Power feeds, discovery, recommendations, follower views, and suggested users.
• Respond to support requests, contact messages, safety reports, and appeals.
• Detect, prevent, and investigate spam, abuse, harassment, impersonation, scams, security issues, and ban evasion.
• Enforce Terms, Community Guidelines, Safety & Reporting rules, and moderation decisions.
• Improve, debug, maintain, and protect the platform.

12. Likes, follows, recommendations, and discovery

SleepSpill may use public activity such as likes, follows, dream types, recent posts, and profile activity to recommend dreamers, dreams, feeds, categories, or other discovery features.

Recommendations are not psychological analysis, diagnosis, personality profiling, or professional interpretation. They are platform features meant to help users find content and profiles that may be relevant or interesting.

13. Notifications

SleepSpill may generate notifications for activity such as likes, comments, follows, account updates, moderation activity, security events, or other platform features. Notification records may include who triggered the notification, what type of event occurred, whether it was read, and when it was created.

14. Reports, moderation, and safety records

When content or behavior is reported, SleepSpill may store report details, reporter information, reported user information, content references, staff notes, review status, moderation actions, timestamps, and related safety context.

These records help SleepSpill investigate abuse, enforce rules, detect repeat behavior, prevent ban evasion, respond to appeals, and protect the community. Moderation and safety records may be kept even if public content is later deleted.

15. Rate limits and abuse-prevention records

SleepSpill may store limited technical records to enforce rate limits and prevent abuse. These records may include action type, time of request, user account, IP-related data, identity keys such as email or account identifiers, and similar anti-spam information.

Rate limits may apply to registration, login, password reset, verification email resend, dream posting, dream editing, dream deleting, commenting, comment editing, liking, following, reporting, profile updates, and other actions.

16. Email communication

SleepSpill may send required account emails, including:

• Email verification messages.
• Password reset and account recovery messages.
• Security notices.
• Important service notices.
• Policy update notices.
• Moderation or safety notices.

Optional newsletters, community updates, announcements, or promotional messages are only sent if you choose to receive them or otherwise opt in where required. You may opt out of optional messages, but required account and service messages may still be sent.

17. Support, contact, and appeals

If you contact SleepSpill support, submit an appeal, or report a concern by email or through site tools, SleepSpill may store the message content, contact details, related account information, links, screenshots, timestamps, and staff responses.

Do not include passwords, full security codes, payment information, or unnecessary sensitive personal information in support messages.

18. Staff access and internal tools

Authorized SleepSpill staff, support, moderators, administrators, development, management, or founder-level accounts may access certain account, content, report, and moderation information when needed to operate the site, review reports, handle support, investigate abuse, debug problems, enforce rules, or protect users.

Staff access should be used for legitimate platform, safety, moderation, support, security, or administrative purposes.

19. Sharing and disclosure

SleepSpill does not sell user data to advertisers. SleepSpill may share or disclose information when needed to:

• Operate hosting, email, database, security, or technical services.
• Respond to lawful requests or legal obligations.
• Protect users, staff, the public, or the platform.
• Investigate abuse, threats, exploitation, spam, fraud, or security incidents.
• Enforce Terms, Community Guidelines, Safety & Reporting rules, or moderation decisions.
• Handle a business transfer, site restructuring, ownership change, or platform migration if SleepSpill ever changes structure.

Public content is already visible to other people and may be shared by them outside SleepSpill.

20. Third-party services and links

SleepSpill may rely on third-party services for hosting, email delivery, security, domain services, analytics, storage, or other technical needs. SleepSpill may also contain links to third-party websites.

Third-party sites and services have their own privacy practices. SleepSpill is not responsible for websites or services it does not control.

21. Data security

SleepSpill uses reasonable security practices such as password hashing, session protections, CSRF protections, email verification, password reset tokens, rate limits, and access controls. However, no website, database, account system, or internet transmission can be guaranteed perfectly secure.

You can help protect your account by using a strong password, keeping your email secure, logging out on shared devices, and never sharing reset links or security codes.

22. Data retention

SleepSpill may keep information for as long as needed to operate accounts, provide services, maintain public content, enforce rules, support moderation, prevent abuse, comply with legal obligations, resolve disputes, debug problems, protect security, and maintain backups.

Some information may be deleted quickly, while other information may be retained longer for safety, moderation, account integrity, technical, or legal reasons.

23. Account deletion

You may be able to delete your account from account settings. Account deletion may remove or delete your profile and account-linked content from normal public view depending on how SleepSpill is built at that time.

Deletion may not immediately remove all records from backups, logs, moderation records, security records, abuse-prevention systems, staff review history, or legal compliance records. SleepSpill may keep limited information when needed for safety, security, abuse prevention, dispute handling, legal compliance, or platform integrity.

SleepSpill cannot remove screenshots, cached pages, copied content, quotes, or other copies saved by people outside the platform.

24. Your choices

Depending on available features, you may be able to:

• Edit your display name.
• Update your email address.
• Change your password.
• Add, update, or remove your profile picture.
• Edit your profile bio.
• Change public profile visibility settings.
• Hide or show followers, following, and profile statistics.
• Delete your own dreams or comments where tools are available.
• Delete your account.
• Contact support about privacy, safety, or account questions.

Some details may be locked and not user-editable, including date of birth and, at launch, username changes.

25. Children and younger users

SleepSpill is not intended for children and requires users to be at least 16 years old. If SleepSpill learns that an account does not meet age eligibility requirements, the account may be restricted, suspended, or deleted.

Sexual exploitation, grooming, sexual solicitation, or sexual content involving minors is prohibited and may be reported when required or appropriate.

26. International users

SleepSpill may be operated from the United States or use service providers located in the United States or other locations. If you use SleepSpill from another country, your information may be processed in locations where privacy laws may differ from those in your area.

27. Changes to this Privacy Policy

SleepSpill may update this Privacy Policy as features, safety practices, laws, or platform operations change. The updated version may be posted on this page with a new effective date or update notice.

If changes are significant, SleepSpill may provide notice through the website, account notices, email, or another reasonable method.

28. Contact

Questions about privacy can be sent to support@sleepspill.com.