Privacy Policy
dreamie.store · Last updated: June 2026
1. Data Controller
Andrew Blewett
101 High Trees Close, Redditch, Worcestershire, B98 7XL, United Kingdom
Email: andyblewett991@gmail.com
Governed by the UK GDPR and the Data Protection Act 2018 (DPA 2018).
2. Personal Data We Collect
| Category | Examples | Purpose | Lawful Basis |
|---|---|---|---|
| Account data | Username, email address, hashed password | Account creation and authentication | Contract (Art. 6(1)(b)) |
| Profile data | Display name, Nintendo friend code (optional, user-provided) | Identifying you to other users for trading | Contract (Art. 6(1)(b)) / Consent |
| Trading data | Villager requests, queue positions, trade history, listing details | Platform trading functionality | Contract (Art. 6(1)(b)) |
| Usage data | Session duration, features used | Platform improvement | Legitimate interests (Art. 6(1)(f)) |
| Technical data | Device type, OS version, crash logs | Stability and support | Legitimate interests (Art. 6(1)(f)) |
Nintendo friend codes: These are entirely optional and self-provided. They are shared only to facilitate trades between users. We do not share them with Nintendo or any third party.
3. Data Visible to Other Users
When you list a villager or join a queue, your display name and any Nintendo friend code you have chosen to share will be visible to other users in that queue or listing. Do not share information you do not want other users to see.
4. Data Retention
| Data type | Retention period |
|---|---|
| Account and profile data | Until account deletion; deleted within 30 days of request |
| Trade history | Until account deletion; you may export it beforehand |
| Active queue/listing data | Deleted when the listing is closed or the account is deleted |
| Usage data | Anonymised after 90 days |
5. Third-Party Services
| Processor | Purpose | Location | Safeguard |
|---|---|---|---|
| Supabase | Account and trading data storage | European Union | EU-hosted; DPA in place |
| Socket.io / Realtime provider | Real-time queue and trade updates | EU/USA | Standard Contractual Clauses |
| Apple / Google | App distribution | USA | Apple/Google's own privacy policies |
We do not use advertising networks or sell data. dreamie.store is not affiliated with Nintendo.
6. Your Rights Under UK GDPR
- •Right of access – request a copy of all personal data we hold
- •Right to rectification – correct inaccurate or incomplete data
- •Right to erasure – delete your account and all data
- •Right to restriction of processing – limit how your data is used
- •Right to data portability – receive your data in a portable format
- •Right to object – object to processing based on legitimate interests
- •Rights related to automated decision-making – we do not make automated decisions with significant effects
- •Right to withdraw consent – remove your friend code at any time from your profile
Email andyblewett991@gmail.com. Response within one calendar month.
7. Right to Lodge a Complaint
Information Commissioner's Office (ICO)
ico.org.uk · 0303 123 1113
8. Age Restrictions
dreamie.store is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13.
9. Data Security
- •All data in transit encrypted with TLS 1.2+
- •Passwords hashed using bcrypt
- •Supabase row-level security restricts access to account owners
- •Friend codes are stored encrypted at rest
10. Changes to This Policy
Material changes communicated via in-app notification at least 14 days before taking effect.