Privacy Policy

Last updated: July 28, 2026

Who we are

Hekate Dreams is operated by Mindaugas Jaceris, an individual working as a sole trader in Lithuania. For the data described below, that is who decides why and how it is handled — the data controller, in the language of the GDPR.

You can reach a human at [email protected].

What this policy covers

This policy covers this website only — hekatedreams.com, the articles in the dream meanings library, and the waitlist form.

The Hekate Dreams app has not launched. When it does, it will have its own privacy policy describing what it collects. Nothing here should be read as a promise about the app.

What we collect

Three things, and only three.

• Your email address — only if you type it into the waitlist form and submit it. Nothing else on this site asks you for anything. We do not ask for your name, and there is no account to create.
• Aggregate visit data — which pages get read, roughly how many times, and where traffic came from. This is collected by Cloudflare Web Analytics, which sets no cookies and does not build a profile of you or follow you to other sites.
• Technical logs — Cloudflare hosts this site and records standard request data, including IP addresses, to serve pages and block attacks. These logs are short-lived and we do not use them to identify readers.

One honest detail: if the waitlist form fails to reach our email provider, the error is written to a technical log so we can see what broke, and that log entry can briefly include the address you submitted. It is not stored anywhere else and is not used for anything but fixing the fault.

Why we collect it, and what allows us to

• Your email address — to write to you when the app opens. The legal basis is your consent, given when you submit the form. You can withdraw it at any time, and withdrawing it is as easy as giving it: use the unsubscribe link in any email we send, or write to us. Withdrawing does not affect anything we sent before.
• Analytics and technical logs — to understand which articles are worth writing more of, and to keep the site up and unattacked. The legal basis is our legitimate interest in running and improving the site, weighed against how little this data says about any individual.

Who else sees it

Two companies, both acting on our instructions and neither free to use your data for their own purposes:

• Resend (operated by Plus Five Five, Inc., United States) — stores the waitlist and sends the mail. This is where your address lives.
• Cloudflare — hosts the site and provides the analytics described above.

That is the entire list. No ads. No advertising networks. No data brokers. No tracking SDKs. We do not sell your data, and we never will — not as a policy we might revise, but because there is nothing here worth selling and we would rather have your trust.

Data leaving the EU

Resend and Cloudflare both process data in the United States, so your email address leaves the European Economic Area. Those transfers are covered by the European Commission's Standard Contractual Clauses and by the EU–US Data Privacy Framework, which are the safeguards the GDPR requires for exactly this.

How long we keep it

Your email address stays on the waitlist until you unsubscribe or ask us to delete it — then it goes, and we do not keep a copy. If we ever decide not to launch, or the waitlist has plainly served its purpose, we will delete the whole list rather than sit on it.

Analytics data is aggregate and is not tied to you. Technical logs are kept only as long as Cloudflare's standard retention.

Your rights

Under the GDPR you can ask us to do any of the following, free of charge:

• Give you a copy of the personal data we hold about you.
• Correct it if it is wrong.
• Delete it.
• Restrict or object to how we use it.
• Send it to you, or to someone else, in a portable format.
• Withdraw your consent to the waitlist at any time.

Write to [email protected] and we will answer within one month. We honour these requests for everyone who asks, whether or not the GDPR applies where you live.

If you think we have handled your data badly, you can complain to a data protection authority. Ours is the Lithuanian State Data Protection Inspectorate — Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, 10312 Vilnius, [email protected], vdai.lrv.lt. If you live elsewhere in the EU or EEA, you can complain to your own national authority instead.

Cookies

This site sets no cookies at all. There is no consent banner because there is nothing to consent to. Our analytics is cookieless by design, the fonts are served from our own domain rather than a font network, and there are no embedded videos, comment widgets, or social buttons loading anything in the background.

Children

This site is not directed at children, and the waitlist is meant for people aged 16 or over. If you are under 16, please do not submit your email address. If you believe a child has, write to us and we will delete it.

Changes to this policy

If this policy changes in a way that matters, we will change the date at the top and, where the change affects how we use your email address, tell the waitlist by email before it takes effect.

Contact

Questions about this policy, or about anything above: [email protected]