Your info, no mystery
What we collect, why we collect it, where it lives and what you can do about it.
Last updated 12 October 2026
Who’s responsible for your data
The controller is the operator of Sweet Dreams. Email: [email protected]. You can also use the contact form.
What we collect
Just playing? We don’t ask who you are and we don’t build a profile. There are no advertising or analytics trackers on the site.
| When | What | Why |
|---|---|---|
| You join with email | First and last name, screen name, email, date of birth, a password (kept only as a one-way hash), join date, last sign-in, failed sign-in count and any lock time, and when you accepted the Terms and Privacy Policy. | To run your account, check you’re 18+ and keep it safe. |
| You sign in with Google | Your name, verified email and Google account ID, as returned by Google and checked by our server. We then ask for a screen name and date of birth. | To sign you in and check you’re 18+. |
| You message us | Your name, email, the topic and what you write. | To read and reply. |
| You ask for a password reset | Your email and a one-time reset code (stored as a hash, valid for an hour). | So you can set a new password. |
| You sign in or send any form | A short-lived counter tied to a one-way hash of your IP address. | To limit spam and password guessing. Counters clear themselves. |
We never ask for or store card or bank details, and we don’t use your data for advertising or profiling.
Where it lives
- Accounts are stored on our web server as protected files that can’t be opened from the web. There’s no separate database. They stay until you delete your account or ask us to.
- Messages sent through our forms are emailed by our server, via an email delivery service (SMTP), to our support inbox. We also keep a protected delivery log with only the date, the outcome, the form used and any technical error. It has no names, emails or message text.
- In your browser we save your age answer, cookie-notice choice and visit start time (for the clock), plus a sign-in cookie when you sign in or use a form. See the Cookie Policy.
- Our hosting provider may record routine technical logs (such as IP address and page requested) for security and operations.
Other parties
- Email delivery service. Handles messages from our forms and password-reset emails.
- Google Sign-In. Only if switched on and chosen by you. Loading the Google button on the sign-in and join pages connects your browser to Google, and Google’s privacy policy applies.
- The games. Games load in our pages from files hosted on sweetdreamscandyandtoys.com and may use your browser’s storage to run. We receive no payment or identity details through them.
- Hosting provider. Stores and delivers the site.
We never sell personal data.
Our purposes
- Providing and securing your account.
- Checking you’re 18 or over, because the site is for adults.
- Answering your messages and requests.
- Preventing abuse of the site and its forms.
Your rights
Depending on where you live (for example under the GDPR, the UK GDPR or US state privacy laws), you may be able to access, correct or delete your data, object to or restrict its use, receive a copy, or complain to a data protection authority. You can delete your account yourself any time on the account page, which removes it from our server. For anything else, use the contact form.
Children
The site is meant for adults aged 18 and over, not children. If you think a child has given us information, tell us and we’ll remove it.
Changes
If this policy changes, we’ll update this page and its date.