Privacy Policy

Last updated: November 8, 2026

Who we are

Dream a Game (dreamagame.com) is run by Latona Labs ("we", "us"). Questions or requests about privacy go to privacy@dreamagame.com.

What we collect

From the grown-up who owns the account

• Email address. Used to send 6-digit sign-in codes and to identify your family's account. One email per family.
• Sign-in codes. We store only a scrambled (hashed) version of each code. It's deleted when it's used and stops working after 10 minutes.

While your family makes games

• Game requests. What your kid says or types to make or change a game (for example, "make the penguin faster"), and the short replies Claude gives back.
• Games. The game code, title and emoji, plus every saved version so changes can be undone.
• Sharing choices. Whether each game has been shared.
• Last active date. When each account last used Dream a Game, so we can count how many families use it each month.
• Build records. For each time Claude builds or changes a game: which game, when, how long it took, whether it worked, and how much AI processing it used. These never include what your kid said. We use them to fix problems and keep costs in check.
• Feedback. Anything your family types or says into the 💬 feedback box, with the game you were on when you sent it. We email it to ourselves with your account's email address so we can read it and reply. Please don't include personal details.

Collected automatically

• One sign-in cookie. Keeps a device signed in for up to a year. We don't use advertising or analytics cookies.
• IP address. Used to limit sign-in attempts and prevent abuse. We keep it for at most 2 days. Our hosting provider also processes IP addresses to deliver and protect the site.
• Bot check. On the sign-in screen, Cloudflare Turnstile checks that a real person is asking for a code. To do this, Cloudflare looks at information about your browser and device. It only runs on the sign-in screen. If your device blocks the check (for example with Screen Time limits or a content blocker), you can still get a code, but fewer codes can be sent from your network each day.
• Error and request logs. Our hosting provider keeps technical logs for a few days so we can fix problems: the page or action requested, the time, IP address, browser type and details of any error.
• Sign-in attempts. Any email address typed into the sign-in form is kept for up to 2 days to limit how many codes and wrong guesses it gets, even if it doesn't belong to an account.

What stays on your device

• Voice. When your kid taps the microphone, your device's own browser turns speech into text (on an iPad, that's Apple's speech recognition). We receive only the text. Audio never reaches us.
• Game saves. Games may save things like high scores in the browser's local storage on your device. We can't see this.

We don't ask for kids' names, ages, birthdays, photos, contacts or locations. Please remind kids not to put real names or other personal details into their game ideas, especially for games they plan to share.

How we use it

• To build, save and show your family's games.
• To send sign-in codes and keep your account secure.
• To enforce limits (2 new games and 20 changes a day per family) and prevent abuse. When a family reaches a daily limit, we get an email with the account's email address so we can keep an eye on usage.
• To fix problems with the service.
• To read your feedback and make Dream a Game better, and to reply if you asked us something.

We don't sell or rent personal information, use it for advertising, or build profiles of kids. We don't train AI models on your family's data.

Who we share it with

We use a small number of service providers ("subprocessors") to run Dream a Game. The full list, with what each one receives, is on our Subprocessors page. In short:

• Cloudflare hosts the website, stores accounts and games, and sends sign-in emails.
• Anthropic provides Claude, the AI that builds games. When your kid asks for a game or a change, we send Anthropic the request, the earlier requests and replies for that game, and the current game code. We don't send your email address. Under Anthropic's commercial terms, Anthropic doesn't use this data to train its models.

We may also share information if the law requires it, to protect the safety of kids or others, or as part of a merger or sale of the service (in which case this policy would continue to apply to your data).

Shared games are public

A game is private to your family until someone in your family taps Share. After that, anyone with the link can play it. A shared page shows the game itself, including its title and anything written inside the game, but not the requests your kid made or the email on the account. Deleting a game turns off its share link.

Reporting shared games

Anyone playing a shared game can tap Report to tell us something's wrong. We store the game it's about, the reason they picked and anything they typed, and we email the report to ourselves to review. We keep the reporter's IP address for up to 2 days to prevent abuse, and we don't ask who they are. A game reported by 3 different people within a day stops being shared automatically until we look at it. We don't tell the family who reported their game.

Kids' privacy (COPPA)

Dream a Game is meant for kids, so we follow the U.S. Children's Online Privacy Protection Act (COPPA). Accounts can only be created by a parent or guardian aged 18 or older, who signs in with their own email and agrees to this policy on behalf of their family. Kids use Dream a Game through that grown-up's account and never create accounts of their own.

As the parent or guardian, you can at any time:

• Review what your kid has said and made. It's all shown in each game in the app.
• Delete any game in the app with the 🗑️ button, or ask us to delete your whole account.
• Stop further collection by no longer using the service and asking us to delete your account.

Email privacy@dreamagame.com from the account's email address for account deletion or any other request. We'll respond within 30 days.

How long we keep it

• Games and requests: until you delete the game or the account. Deleting a game removes all of its versions right away.
• Your email address: until you ask us to delete your account.
• Sign-in codes: until used, or 10 minutes.
• IP addresses for limits: up to 2 days.
• Error and request logs: a few days.
• Reports about shared games: 12 months.
• Feedback: 12 months in our database (copies in our email inbox may be kept longer). Ask us to delete it any time.
• Build records: 12 months. They stay after a game is deleted because they contain no game content, and are removed when you ask us to delete your account.
• Backups: our database keeps automatic point-in-time backups for up to 30 days, after which deleted data is gone for good.

Our subprocessors keep data according to their own policies, linked on the Subprocessors page.

How we protect it

All traffic uses encrypted HTTPS. Each game runs in a locked-down sandbox that can't reach the internet, read your sign-in, or access other families' games. Families can only see their own games. Sign-in codes are limited to a few tries and a few emails a day, and asking for one goes through a bot check (devices that block the check get a smaller daily allowance). No system is perfectly secure, but we work to keep your family's data safe and will tell you if a breach affects it.

Your privacy rights

Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, and to not be discriminated against for using these rights. We don't sell or "share" personal information for targeted advertising. To make a request, email privacy@dreamagame.com. We may need to confirm you control the account's email address first.

Families in Canada

We handle personal information of Canadian families in line with Canada's federal privacy law (PIPEDA) and, for families in Quebec, Quebec's privacy law. You can ask to access or correct your information, withdraw consent, or delete your account by emailing privacy@dreamagame.com, which reaches the person responsible for privacy at Latona Labs. Your information is stored and processed in the United States and on Cloudflare's global network, so it may be accessible to authorities in those places under their laws.

Changes to this policy

When we change this policy, we'll update the date at the top. If a change materially affects how we use information we already have, we'll let account holders know by email before it takes effect, and we'll ask for consent again where COPPA requires it.