Privacy policy

Data controller

The data controller for your personal data is the owner of Banco de Sueños, reachable at privacidad@suenios.local. All privacy questions, rights requests and complaints must be sent to that address.

Data we collect

We collect the data you give us when signing up (first name, last name, email address, country, city, language and account creation date) and the content you upload voluntarily: dream narratives, dates, places, countries, linked people and relationships between entries.

We also process the minimal technical data needed to run the session and prevent abuse. We never store your password in plain text: it is kept only as an irreversible cryptographic hash, and we do not use your data for advertising profiles or sell it to third parties.

Purposes of processing

We use your data to provide the service you asked for: creating and maintaining your account, storing and displaying your entries, building the atlas and the link graph, allowing data export, securing the service, preventing fraud and complying with legal obligations.

Legal basis

The legal basis for processing is your consent, given by ticking the acceptance box during signup and confirmed when you activate the account. You may withdraw it at any time by deleting your account, which ends the processing except for legal retention duties.

Retention

We keep your account data and the content you uploaded for as long as your account remains active. Access and security logs are kept for a maximum of 24 months and are then periodically deleted or anonymised.

Recipients

Your data is processed by the Owner and its infrastructure providers: the hosting company that stores the database and the email provider that sends activation and recovery codes. They act as data processors, following the Owner's instructions and bound by contract to use the data only to provide the service.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to privacidad@suenios.local. We reply within the maximum legal period and free of charge. From the "My data" section you can also download all the information linked to your account in an open format.

If you believe your rights request was not handled properly, you may ask for a review of the decision or lodge a complaint with the data protection supervisory authority in your country of residence.

Children

The service is not directed at children under 16 and we do not knowingly collect their data. If we find that an account belongs to a child without the authorisation of a legal guardian, we will delete it.

Cookies

We only use strictly necessary technical cookies: the session cookie that keeps you signed in and the language preference cookie. We do not use advertising or third-party tracking cookies.

Security

We apply encryption in transit, one-way password hashing, form forgery protection, login attempt limits and per-user access restrictions. No system is infallible, so please keep your password safe and tell us about any suspicious activity.

International transfers

Data is stored on the hosting provider's servers. Should any processing involve transferring data to another country, we ensure adequate protection through standard contractual clauses or another mechanism recognised by applicable law.

Contact and complaints

To exercise rights or ask privacy questions, write to privacidad@suenios.local. If you are not satisfied with our reply, you may lodge a complaint with the data protection supervisory authority in your country of residence.