Dreamcase Privacy Policy
Last updated: October 24, 2026
Dreamcase is an app to catalogue your collection of Disney items. It is an unofficial app: it is not published, endorsed or sponsored by The Walt Disney Company.
This policy explains which data Dreamcase processes, why, for how long, and how to use your rights. We wrote it to be short and accurate.
1. Who is responsible for your data
Antoine Conan, sole trader (trading name "Stackwise"), 210 rue du Faubourg Saint-Denis, 75010 Paris, France ("we", "us"). See the legal notice. Contact for any question about your data: contact@rocketcode.app.
2. The essentials
- Without an account, your collection stays on your device. We do not receive it.
- The account is optional. It backs up your collection and lets you find it on your other devices.
- We do not ask Apple for your name or your email address.
- No advertising, no tracking, no analytics tools, no sale of data.
- You can delete your account in the app at any time.
3. If you use Dreamcase without an account
Your collection, your photos and your profile are stored only on your device. Background removal on photos happens on your device.
The app downloads the item catalogue from our file servers (Cloudflare). As with any Internet connection, Cloudflare sees your device's IP address in order to respond. We keep no log of these downloads.
4. If you create an account
You sign in with "Sign in with Apple". We receive and keep:
- an account identifier provided by Apple, specific to Dreamcase;
- an Apple token, encrypted, used only to remove Dreamcase's access to your Apple Account when you delete your account;
- for each signed-in device: the device type (for example "iPhone"), sign-in and last activity dates;
- your collection: items, copies (condition, purchase date and place, price paid, estimated value, notes), showcases, storage places, series, wanted items, settings;
- your item photos, in their original and background-removed versions;
- your profile, if you fill it in: first name, profile photo, year you started collecting, favourite character and work, centrepiece item, most wanted item.
Your collection and your photos are sent encrypted (HTTPS). Photos are sent without the camera's location data.
Our server also keeps a technical log of each request: the action requested, the result, the duration, the account identifier and the app version. This log contains neither your IP address nor the content of your collection. It is used to run the service and fix failures.
4a. If you propose a correction or a photo to the catalogue
From an item of the catalogue, you can report an error or suggest more information, with your account. We receive and keep: your proposal (the choice, the text, the item concerned), the photo if you attach one, the date of your consent for the photo, and your account identifier. In the catalogue, an accepted contribution appears under the name "Collector" followed by a few characters of your identifier, never under your name. The photo is sent without the camera's location data.
4b. If you subscribe to Dreamcase+
Purchase, renewal and cancellation go through Apple. We receive neither your payment details, nor your name, nor your email address. The app checks your subscription with the App Store, on your device.
5. Why we process this data (legal bases)
| What we do | Legal basis (GDPR) |
|---|---|
| Back up and sync your collection, photos and profile | performance of the contract (the terms of use), Article 6(1)(b) |
| Sign you in and protect your account (tokens, sessions) | performance of the contract, Article 6(1)(b) |
| Review and publish your proposals to the catalogue, with the photo licence you grant | performance of the contract (section 5a of the terms of use), Article 6(1)(b) |
| Technical log, rate limits, backups | legitimate interest: run the service, protect it, avoid losing your data, Article 6(1)(f) |
| Answer your messages and image removal requests | legitimate interest, or legal obligation for a request about your rights |
We do not use your data for advertising, for profiling or to train AI models.
6. Technical report and messages
If the app crashes, it prepares a technical report on your device: device model, iOS and app versions, region format, memory and crash measurements. It does not contain your collection. It is sent only if you choose to send it to us by email.
When you write to us, we receive your email address and your message. Our mailbox is hosted by Apple (iCloud Mail).
7. How long we keep your data
| Data | Duration |
|---|---|
| Account, collection, photos, profile | as long as the account exists |
| Item or photo you delete | marked as deleted on the server to update your other devices, erased with the account |
| Technical log | 30 days at most, then erased automatically |
| Backups | 90 days, then one offline copy keeps it for at most one more month |
| Proposals to the catalogue | refused photo: deleted; pending photo: deleted with the account; accepted photo: stays in the catalogue, credited "Deleted collector" after the account is deleted |
| Support messages | 3 years after the last exchange |
| Image removal requests | 5 years after the request is closed, to keep proof of what we did |
| Inactive account | no automatic deletion: the account is the backup you asked for, and we cannot warn you beforehand (we do not have your email). You can delete it at any time |
8. Deleting your account
In the app: Profile, Account, "Delete Account". Deletion is immediate:
- your account, collection, profile and sessions are erased from our database;
- your photo files are erased from our storage;
- Dreamcase's access to your Apple Account is revoked with Apple;
- your device is emptied.
Before you delete your account, you can export your collection (spreadsheet, PDF) from the app.
Your data stays in our encrypted backups for at most 90 days, then for at most one more month on an offline copy. It is then erased. We do not use it, except to restore the service after an incident.
If you sign in again later with the same Apple Account, a new, empty account is created.
9. Who receives your data
We do not sell or rent your data. Only these providers process it, on our behalf and on our instructions:
| Provider | Role | Location |
|---|---|---|
| Hetzner Online GmbH | server (database, sync service) | Germany, European Union |
| Cloudflare, Inc. | storage of photos and backups, traffic routing, abuse protection | storage in Western Europe; routing through its global network |
| Apple | Sign in with Apple, app distribution, mailbox | Ireland and United States |
Cloudflare and Apple are US companies. When your data leaves the European Union, the transfer relies on the EU-US Data Privacy Framework, to which they adhere, or on the European Commission's standard contractual clauses.
We may also disclose data when the law requires it.
10. Security
- Encrypted connections (HTTPS).
- Each account sees only its own data: the server checks the account on every request, and the database checks it a second time.
- The Apple token is encrypted in the database. The app's tokens are kept in your device's keychain.
- Photos are in private storage; each access goes through a temporary 15-minute address.
- Backup copies outside the server are encrypted. A restore test runs every week.
No system is 100% secure. If a data breach puts you at risk, we will notify the French data protection authority (CNIL) and, where the law requires it, the people concerned.
11. Your rights
You have the right to access your data, correct it, erase it, restrict its use, object to processing based on legitimate interest, and receive it in a readable format (portability).
- Correct, erase, export: directly in the app.
- Any other request: contact@rocketcode.app. We answer within one month. We know neither your name nor your email: include your account identifier (in the app: Profile, Account, "Copy"). We answer only for that account and, if in doubt, we may ask for a second detail that only the account holder knows.
- You can also remove Dreamcase's access in your Apple Account settings (Sign in with Apple).
If you think your rights are not respected, you can complain to the CNIL (www.cnil.fr) or to the data protection authority of your country.
12. Children
Dreamcase is for all collectors. The app can be used without an account at any age. An account requires an Apple Account: you can create one on your own from age 15; under 15, with the agreement of a parent or legal guardian. A parent can ask us to delete their child's data at contact@rocketcode.app.
13. Cookies
The app uses no cookies or trackers. Neither does this website.
14. Changes
If this policy changes in a significant way, we will say so in the app before the change applies. The date at the top of the page shows the latest version.