1. Introduction
Mini Dream Universe ("MDU", "we", "our", or "us"), operated by Mini Dream Universe, provides an in-browser interactive 3D miniature character creator and related services at minidreamuniverse.com. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform.
2. Data We Collect
- Account Data: Name, email address, profile photo (optional), username, bio, and authentication provider details (Google, Discord, or email).
- Character Data: 3D character configurations, names, descriptions, tags, and associated thumbnails you create.
- Payment Data: Processed by Stripe. We store your Stripe customer ID and subscription status but never your card details.
- Usage Data: Page views, feature usage, API calls, and error logs to improve our service.
- Device Data: Browser type, device performance tier, and IP address for rate limiting and security.
- Address Data: Shipping address for physical print orders (optional).
3. How We Use Your Data
- Provide, maintain, and improve our 3D creation platform
- Process payments and manage subscriptions via Stripe
- Send transactional emails (export notifications, payment confirmations)
- Enable social features (gallery, comments, follows, notifications)
- Detect abuse, enforce rate limits, and protect platform integrity
- Generate aggregated, anonymized analytics
4. Third-Party Services
- Stripe: Payment processing and subscription management
- Resend: Transactional email delivery
- Tripo3D: AI-powered 3D model generation
- Google/Discord: OAuth authentication providers
- Hetzner: Server infrastructure (EU-based)
We do not sell your personal data to third parties. Data shared with providers is limited to what is necessary for the specific service.
5. Data Storage & Security
Your data is stored on EU-based servers (Hetzner, Germany). We use HTTPS/TLS encryption in transit, database-level access controls, and follow security best practices including CSP headers, HSTS, rate limiting, and input validation.
6. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access: Request a copy of all personal data we hold about you
- Rectification: Update or correct your personal information
- Erasure: Request deletion of your account and all associated data
- Portability: Export your data in a machine-readable format (JSON)
- Objection: Object to processing of your data for specific purposes
You can exercise your data export and account deletion rights directly from your account settings.
7. Cookies
We use essential cookies for authentication (session management) and preferences. We do not use third-party tracking cookies. You can manage cookie preferences via the consent banner shown on first visit.
8. Data Retention
Account data is retained while your account is active. Upon deletion, we remove all personal data within 30 days. Anonymized usage statistics may be retained indefinitely. Stripe retains payment data per their own retention policy.
9. Contact
For privacy-related inquiries, contact us at privacy@minidreamuniverse.com.