Privacy Policy

Effective date: September 22, 2026

dreamshorts.ai is operated by Dream Shorts Studio, which is the controller of your personal data. This policy explains what we collect, what we do with it, and what we do not do.

1. What We Collect

Account. Your email address, a password verifier (we never store your password itself), and — if you sign in with Google, X, Telegram, LINE, or Kakao — the account identifier that provider gives us.

Purchases. Orders, coin balance, unlocks, and subscription status. Payments currently use Alipay or WeChat Pay through our payment processor. We receive the transaction information needed to match payments to orders; we do not collect your payment account password. Card payment is not currently offered.

Use of the service. Which episodes you have unlocked, watched, or favourited, and your notification and display preferences.

Technical. IP address, device and browser information, session identifiers, and error and performance logs — the data any web service needs in order to run and stay secure.

Optional visit analytics. When enabled, we operate our own Rybbit instance at v2.dreamshorts.ai. Depending on the enabled site settings, it collects page addresses and titles, URL parameters, referring sites, device/browser categories, approximate location, page navigation, outbound-link and button clicks, and browser errors. URLs and interaction data can contain information you enter or reveal the content you visit. The browser stores a pseudonymous visitor identifier, and the service processes IP addresses to derive analytics information. Optional settings can also enable performance measurements, copy and form-interaction events, session replay, or retention of raw IP addresses; these are not required for basic visit counting. We do not deliberately send account IDs or payment credentials to analytics. Previously saved browser opt-out choices remain effective; see Your Rights and Choices below.

Age confirmation. This browser remembers your entry age declaration in local storage. A separate account-level adult confirmation may be recorded when you sign in and confirm eligibility for restricted content. The browser declaration alone does not confirm your account, and neither declaration is an independent verification of your age.

2. What We Use It For

To run your account, deliver the content you paid for, take payment, keep the service working and secure, prevent fraud and abuse, and answer you when you contact us.

3. Legal Basis

Under the UK GDPR we need a legal basis for each thing we do with your data. Ours are:

A note on what you watch. On an adults-only service, your unlock and viewing history can reveal information about your sex life or sexual orientation, which the UK GDPR treats as special category data. We process it only to provide the service you asked for, on the basis of your explicit consent, which you give when you create an account and unlock content and withdraw by closing your account. We never disclose it (see section 4).

4. What We Do Not Do

This is the part that matters most on a service like this one:

• We do not sell your personal information.
• We do not disclose your viewing activity to anyone. What you watch stays between you and us.
• We use self-hosted visit analytics, not advertising trackers. There is no Google Analytics, Meta pixel, TikTok pixel or advertising network. Analytics data is stored in our own deployment, and optional vendor telemetry is disabled.
• We do not use your data to train AI models.

5. Who We Share With

Only where it is necessary to run the service:

• our payment processor, to take payment and handle refunds and disputes;
• our hosting, storage, and content-delivery providers, which carry the service;
• our email and messaging providers, to send the notifications you asked for; and
• courts, regulators, and law enforcement, where we are required to by valid legal process.

That is the complete list. We do not share your data with advertisers or data brokers.

6. How Long We Keep It

While your account is open, and afterwards only for as long as we need it — to settle payments, meet tax and accounting requirements, or resolve a dispute. We delete or anonymise the rest.

Visit analytics events have a 90-day retention policy. Expired records are removed during scheduled database maintenance; backup copies may retain them for up to 7 additional days after removal.

7. Your Rights and Choices

You can change your email and preferences, turn notifications off, and close your account from within the service at any time. Closing your account removes your access; coins and unlocks are not refunded on closure except as set out in Billing & Refunds.

Visit analytics is enabled by default when the site operator activates it. The analytics preference controls are temporarily unavailable on this privacy page and in the account panel. Previously saved opt-out choices remain effective and prevent future collection on subsequent visits; they do not erase previously collected records. Each choice applies to this browser and website address (the www and non-www addresses have separate browser storage). Clearing browser storage resets the choice. The operator cannot override a saved opt-out by switching analytics back on.

Under the UK GDPR you also have the right to:

• access the personal data we hold about you and receive a copy of it;
• have it corrected if it is wrong;
• have it erased, where we no longer need it or you withdraw consent;
• restrict how we use it while a dispute about it is resolved;
• receive the data you gave us in a portable, machine-readable form;
• object to processing based on our legitimate interests; and
• withdraw consent at any time, without affecting what was done before.

To exercise any of these, write to us. Privacy requests go to support@dreamshorts.ai. We may need to verify who you are first, and we may need to keep records the law requires us to keep. We respond within one month.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk. If you live elsewhere, you may also complain to your local data protection authority.

8. Cookies

We use cookies and local storage to keep you signed in, hold your session, remember your entry age declaration, language and display preferences, and protect against abuse. When visit analytics is enabled, local storage also holds a pseudonymous analytics visitor identifier and, if selected, your analytics opt-out. We use no analytics or advertising cookies. Blocking necessary session cookies will stop sign-in from working. The entry age declaration applies to this browser and website address; www and non-www have separate storage. Clearing storage requires confirmation again. If storage is unavailable, confirmation applies only to the current page and is requested again after reload.

9. Security

We protect your data with encrypted transmission, hashed password storage, access controls, and audited administrative access. No service can promise perfect security. Use a strong, unique password, and tell us if you think your account has been compromised. Account security: service@dreamshorts.ai

10. Children

This service is for adults only. It is not directed at anyone under 18, and we do not knowingly collect information from anyone under 18.

11. International Transfers

The service and its providers may process your data in more than one country. Where your data leaves the United Kingdom, we rely on UK adequacy regulations for the destination country, the UK International Data Transfer Agreement or Addendum, or another safeguard recognised under the UK GDPR.

12. Changes

We may update this policy. Material changes take effect when posted with an updated effective date.

13. Contact

Dream Shorts Studio — https://dreamshorts.ai support@dreamshorts.ai