NIGHTMARE ERASER

Erase your nightmares. Restore your peace.

Privacy Policy

Effective: May 28, 2026

1. Who We Are

Nightmare Eraser ("we", "us", "our") operates nightmareeraser.com. This policy explains what personal data we collect, why, and your rights regarding that data.

2. Data We Collect

  • Dream text & emotion: Submitted voluntarily to generate your interpretation. Stored for 30 days, then automatically deleted.
  • Email address: Collected only if you request a certificate by email. Used to send your certificate and, if you consent, occasional updates.
  • Payment information: Processed by Lemon Squeezy. We receive only an order ID and amount — never your card details.
  • IP address: Used for rate limiting and fraud prevention. Not stored beyond the request.

3. Legal Basis (GDPR)

For users in the EEA/UK, our legal bases are: (a) contract — to deliver the service you purchased; (b) consent — for marketing emails; (c) legitimate interest — for fraud prevention and rate limiting.

4. Marketing Emails

We only send marketing communications if you explicitly check the marketing consent box during certificate email delivery. You may unsubscribe at any time via the link in any email or by contacting us directly.

5. Data Sharing

We share data with the following processors:

  • Supabase — database & file storage (EU/US region)
  • Replicate — AI image generation (US)
  • Resend — email delivery (US)
  • Lemon Squeezy — payment processing (US)
  • Vercel — hosting & CDN (US)
  • Upstash — rate limiting (EU/US)

We do not sell your personal data to third parties.

6. Data Retention

  • Dream text & certificates: deleted automatically after 30 days.
  • Email addresses (transactional): retained until you unsubscribe or request deletion.
  • Email send logs: retained for 90 days for troubleshooting.

7. Your Rights

Under GDPR/CCPA you have the right to:

  • Access, correct, or delete your personal data.
  • Withdraw consent at any time (for marketing emails).
  • Data portability and restriction of processing.
  • Lodge a complaint with your local supervisory authority.

To exercise these rights, email privacy@nightmareeraser.com.

8. Cookies

We use only strictly necessary session-based storage (sessionStorage in your browser) to remember whether you have already sent your certificate. No tracking cookies are set.

9. Changes

We may update this policy. Material changes will be reflected in a new effective date.

10. Contact

Data protection inquiries: privacy@nightmareeraser.com