Privacy Policy

Data we collect

We collect only what's necessary to operate the service:

• Account data: email and display name used to register (via Supabase Auth)
• Profile: birth date (optional) and favorite numbers you save
• Dream-interpretation history: only your own, so you can revisit it
• Newsletter email: used for draw reminders — unsubscribe anytime
• Technical data: IP address and User-Agent for rate-limiting and abuse prevention; not retained long-term

Cookies and local storage

The site uses the following cookies and browser storage:

• NEXT_LOCALE cookie: remembers your language (Thai/English), lasts 1 year
• sb-* cookies: Supabase Auth session cookies — only when signed in
• theme cookie via next-themes: remembers light/dark preference
• localStorage 'huayduang.recentDreams': stores your last 5 dream searches locally
• We do not use third-party tracking cookies (no Google Analytics at this time)

Data retention

Retention periods vary by data type:

• User accounts: kept until you delete them
• Dream history: for the life of your account, or until you delete it
• Newsletter email: until you unsubscribe
• API request data: not persisted — only kept transiently in memory

Third-party processors

We use trusted service providers:

• Supabase — database and auth (hosted in Singapore ap-southeast-1)
• Coolify (Hetzner, Germany) — web hosting
• Cloudflare — DNS
• We never sell your data to any third party.

Your rights

Under Thailand's PDPA and common privacy practice, you have the right to:

• Request a copy of your data
• Request correction or deletion of your data
• Withdraw consent
• Lodge a complaint with the relevant authority

Contact about privacy

To delete your account, correct data, or ask questions:

Email hello@huayduang.com