Privacy Policy
Last Updated: October 6, 2026
1. Introduction
Dream Of Dreams LLC ("Dream of Dreams," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit dreamofdreams.com, use the Dream of Dreams Community, contact us, subscribe for updates, or sign in with TikTok or Google.
Dream Of Dreams LLC is responsible for the personal information described in this policy. TikTok separately processes information under the official TikTok Privacy Policy or the regional version available through the TikTok Legal Center when you use TikTok or authorize TikTok Login Kit.
2. Information We Collect
Information you provide
- Contact and subscription information: your name, email address, phone number, and any information included in a message you send to us.
- Communications: records of requests, questions, privacy inquiries, and other correspondence.
Information received when you sign in with TikTok
If you choose to sign in to the Dream of Dreams Community with TikTok, we request only the user.info.basic permission. Subject to your TikTok authorization, TikTok provides:
- your TikTok user identifier (also called an Open ID);
- your TikTok display name; and
- your TikTok profile image or avatar URL.
We use the TikTok user identifier to recognize your community account. We do not request access through this login flow to your TikTok videos, posting capabilities, follower lists, email address, phone number, or private messages.
Google sign-in and book reviews
Google sign-in requests only openid profile. We receive your Google account identifier, display name and profile image to create or recognize your community account. We do not request access to Gmail, Drive, or your contacts. Google processes information under its Privacy Policy.
If you publish a book review, your display name, rating, written review, spoiler label and publication date are public. We store the review against your community account so you can update or remove it. Google account sign-in does not verify a book purchase. You can remove your review using “Remove my review,” or request account-data deletion through our Contact page, identifying your Google community display name. Never send passwords or authentication tokens.
Information collected automatically
- Session and security information: random login-state values, a hashed internal member identifier, a hashed session identifier, session creation and expiration times, revocation status, and security or error records needed to authenticate users and protect the service.
- Device and usage information: information ordinarily sent by a browser or hosting service, such as IP address, browser type, device type, requested pages, referring page, date and time, and diagnostic information.
- Cookies: secure cookies used to complete TikTok or Google sign-in and maintain an authenticated community session. The community session cookie is configured as Secure and HttpOnly and expires after seven days. Browser privacy settings, including restrictions on cross-site cookies, may affect sign-in.
TikTok authorization codes and access tokens are used to complete sign-in and retrieve the authorized basic profile. The community login flow does not store the TikTok access token in the community member or session record.
3. How We Use Information
We use personal information to:
- authenticate you and provide the Dream of Dreams Community;
- display your authorized TikTok name and avatar to you within the community dashboard;
- maintain, secure, troubleshoot, and prevent misuse of our website and services;
- respond to messages, support requests, privacy requests, and other communications;
- send updates you requested, subject to applicable law and your choices;
- comply with legal obligations and enforce our Terms of Service; and
- protect the rights, safety, and integrity of users, Dream of Dreams, TikTok, and others.
We do not use TikTok Login Kit data to post to TikTok, send TikTok messages, build advertising profiles, or sell your personal information.
4. Legal Bases
Where applicable law requires a legal basis, we process information as necessary to provide a service you request, based on your consent, for our legitimate interests in operating and securing the service, and to comply with legal obligations. You may withdraw consent where consent is the basis for processing, but withdrawal does not affect processing already completed.
5. How We Share Information
We do not sell or rent TikTok user data. We may disclose information only as reasonably necessary to:
- Service providers: companies that provide hosting, cloud database, security, website delivery, form processing, and related technical services, including Google Cloud, GitHub Pages, and Cloudflare, subject to their applicable terms and safeguards.
- TikTok: complete and secure the TikTok authorization process and comply with TikTok's developer requirements.
- Legal and safety purposes: comply with law, legal process, or valid government requests; investigate fraud or abuse; or protect rights, safety, and security.
- Business changes: support a merger, financing, reorganization, sale, or transfer of all or part of our business, subject to appropriate confidentiality and legal requirements.
6. Retention
- Community authentication sessions are configured to expire after seven days. Logging out revokes the active server-side session and clears the community session cookie.
- The TikTok user identifier, display name, and avatar URL associated with a community member may be retained until the member requests deletion, the account is removed, or the information is no longer needed for the purposes described in this policy.
- Short-lived OAuth login-state data is valid for approximately ten minutes, although security, audit, revoked-session, or backup records may remain for a longer period where reasonably necessary.
- Contact, subscription, and compliance records are kept only as long as reasonably necessary for their purpose, dispute resolution, security, and legal obligations.
When information is no longer required, we will delete or de-identify it, subject to legal, security, fraud-prevention, backup, and technical requirements.
7. TikTok Disconnection and Data Deletion
Log out
You can end your current Dream of Dreams Community session by selecting Log out on the community page. Logging out revokes that session, but it does not delete your community member record or revoke Dream of Dreams in your TikTok account settings.
Disconnect TikTok authorization
You may manage or remove connected-app permissions through your TikTok account settings, where available. Consult the official TikTok Help Center for TikTok's current account and connected-app instructions. Disconnecting Dream of Dreams from TikTok stops future authorized access, but it may not automatically delete basic profile information already stored by Dream of Dreams.
Request deletion from Dream of Dreams
To request deletion of your TikTok-connected community data, visit our Contact page and include the words "TikTok Data Deletion" in your message. Provide the TikTok display name used with the community and an email address where we can respond. Do not send your password, session cookie, access token, authorization code, or other credentials.
We may take reasonable steps to verify that the requester controls the relevant account. After verification, we will delete or de-identify the associated TikTok profile and community session records unless retention is required or permitted by law for security, fraud prevention, dispute resolution, or compliance. We will confirm completion or explain any applicable exception.
8. Data Security
We use administrative, technical, and organizational safeguards designed to protect personal information. These include encrypted transport, limited OAuth permissions, cryptographically random session values, hashed session identifiers, secure cookie settings, access controls, and restricted browser-origin access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Your Privacy Rights
Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of personal information; restrict or object to certain processing; withdraw consent; or appeal a decision. You may also have the right to complain to a privacy regulator. We will not discriminate against you for exercising applicable privacy rights.
Submit a request through our Contact page. We may need to verify your identity before completing a request.
10. Children's Privacy
The website and Dream of Dreams Community are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users must also meet any higher minimum age required by TikTok or applicable law in their country. If you believe a child has provided personal information improperly, please contact us so we can investigate and delete it where required.
11. International Processing
Our service providers may process information in the United States and other countries. Those countries may have different data-protection laws from your country. Where required, we use legally recognized safeguards for international transfers.
12. Third-Party Services and Official TikTok Resources
Our website links to TikTok and other third-party services. Their privacy practices are governed by their own policies, not this policy. TikTok's collection and use of information within TikTok, including the TikTok authorization screen, are controlled by TikTok.
Official TikTok resources include:
- TikTok Privacy Policy (United States)
- TikTok Terms of Service (United States)
- TikTok Legal Center for current and region-specific legal documents
- TikTok Help Center for current account controls and instructions
TikTok controls and may update these external resources independently. The version applicable to you may depend on your location and TikTok account.
13. Changes to This Policy
We may update this Privacy Policy as our services, practices, or legal obligations change. We will post the revised policy on this page and update the "Last Updated" date. Material changes may be communicated through additional notice where required.
14. Contact Us
For privacy questions, TikTok data-deletion requests, or other concerns, contact Dream Of Dreams LLC through our Contact page.