The paperwork
Privacy policy
We take as little as we can and say what it is for.
Last updated: 4 October 2026.
Dream Coffee is built and run by the Dream Coffee team. For anything about an order, write to us through the Contact page.
1. Who holds your data
The Dream Coffee team holds the data and is responsible for it. Contact: contact@dreamcoffee.homes.
2. What we collect
The email and display name you enter when you sign up, order history, hashed identifiers of activated PCs and security logs. If you sign in with Google, we receive your email, name and profile picture (if any) from Google; we do not receive your Google password and we never post anything to your Google account. When you view a page, the system records the page path and a one-way hash of your IP and browser to count combined visits. We do not collect ID numbers or card details on this site.
3. What for, and on what basis
To create accounts, process orders, issue keys, give support and keep the system safe. The basis is your consent and carrying out the purchase, under Vietnam's Personal Data Protection Law No. 91/2025/QH15 (in force from 1 January 2026).
4. How long we keep it
Account and order data stay while the account is in use. If you ask us to delete, the account is deleted after 14 days (signing in again within 14 days cancels the request); personal details are anonymised, and only order records are kept in anonymised form for accounting as the law requires.
5. Processors and data leaving Vietnam
The system runs on Cloudflare: data storage, Web Analytics visit counts (no cookies) and Turnstile bot protection on the sign-in and sign-up pages. Bank transfers are processed by SePay, transactional email is sent by Resend, and if you choose to sign in with Google, Google handles that sign-in step. When you set a password, your browser asks a leaked-password checking service (api.pwnedpasswords.com, Have I Been Pwned) whether it appears in known leaks: only the first 5 characters of the password hash are sent, never the password or your email. These providers' servers may be outside Vietnam.
6. Cookies
Only the ones needed for signing in and blocking forged requests. Cloudflare Web Analytics counts visits without cookies. No advertising or third-party tracking cookies.
7. Your rights
You can see, correct, delete, limit processing, withdraw consent and complain. Open your Account, then Account settings: there you will find “Export data” (downloads a file) and “Delete account”. For anything else write to contact@dreamcoffee.homes with the subject “Personal data”.
8. Keeping it safe
Passwords are hashed in your browser before they are sent, connections use HTTPS and keys are encrypted when stored. No system is perfectly safe. If something affects your data, we will tell you.
9. Children and changes
The site is not for children under 16. If this policy changes, the date at the top changes too.