Privacy Policy
Last updated: September 10, 2026
Dream City 3D is a service of Dream City Ventures ("we", "us"). This policy explains what personal information we collect when you use dreamcity3d.com, why we collect it, who we share it with, and the choices you have.
We do not sell your personal information. We do not use advertising or cross-site tracking cookies.
Information we collect
Information you give us
- Contact and delivery details — your name, email address, phone number and shipping address, when you request a quote, place an order, or create an account.
- Photos you upload — when you request a custom figurine, the photo you submit, along with any notes and style choices you provide.
- 3D files — models you upload when requesting a printing quote.
- Account credentials — if you create an account with a password, we store only a one-way hash of it (bcrypt), never the password itself. If you sign in with Google we store no password at all.
Information we receive from others
- Google Sign-In (optional) — if you choose to sign in with Google, Google sends us your name, email address, and whether Google has verified that address. We do not receive your Google password, and we do not request access to any other Google service such as Gmail, Drive or Contacts.
- Payment confirmation — Stripe tells us that a payment succeeded, the amount, and the billing/shipping details you entered there.
- Delivery tracking — the carrier, via Shippo, tells us the status of your parcel.
Information collected automatically
Our servers keep ordinary web logs, and we record the IP address of requests in order to apply rate limits that protect the site from abuse. We do not build advertising profiles.
Cookies
We use a small number of strictly functional cookies. None are used for advertising or cross-site tracking.
| Cookie | Purpose |
|---|---|
| Account session | Keeps you signed in to your account. HttpOnly, so it cannot be read by scripts. |
| Review / payment link | Set when you open a personal link we emailed you, so the page can show you your own model or order. |
| Sign-in state | A short-lived value used only during Google sign-in to protect against request forgery. |
How we use your information
- To produce, pay for, ship and support the item you ordered.
- To send you transactional email — quotes, model approvals, receipts, shipping and delivery updates, and account emails such as address confirmation and password resets.
- To show you your own order history if you create an account.
- To protect the service from abuse, including rate limiting.
- To meet our legal, tax and accounting obligations.
We do not send marketing email from this site.
How your photo is used
This is the part worth being explicit about, because it is unusual.
To make a custom figurine, the photo you upload is sent to two third-party services on our behalf: OpenAI, which produces a stylised illustration from it, and Tripo3D, which converts that illustration into a 3D model. Your photo and the images derived from it are transmitted to those providers for that purpose.
Before storing an uploaded JPEG, we strip its embedded metadata, which on phone photos routinely includes the GPS coordinates of where the picture was taken. We do this so that uploading a photo does not hand us your home address as a side effect.
Only staff use the internal tool that runs this pipeline. Your photo is not published, shown to other customers, or used to train anything by us.
Who we share information with
We share the minimum each provider needs to do its job. We do not sell or rent your information to anyone.
| Provider | What they receive | Why |
|---|---|---|
| Stripe | Your name, email, billing and shipping address, order amount | To take payment. Card numbers are entered on Stripe's own checkout page and never reach our servers. |
| Shippo | Your name, shipping address and parcel details | To buy a shipping label and track delivery. |
| SendGrid | Your email address and the message content | To deliver transactional email. |
| OpenAI | The photo you uploaded | To generate the stylised image your figurine is based on. |
| Tripo3D | The stylised image | To generate the 3D model. |
| Only what is needed to sign you in, if you choose Google Sign-In | Authentication. |
We may also disclose information if required by law, or to establish or defend legal claims.
How we protect your information
- Your name, email address, phone number and shipping address are encrypted at rest using AES-256-GCM.
- Passwords are stored only as bcrypt hashes and cannot be recovered by us — which is why a forgotten password must be reset rather than looked up.
- Personal links we email you are single-purpose and expire; password reset links expire in one hour and can be used only once.
- The site is served over HTTPS.
No system is perfectly secure, and we cannot guarantee absolute security.
How long we keep it
We keep order records for as long as we need them to support the order and to meet our legal, tax and accounting obligations. Photos, generated models and print files are kept while they may still be needed to fulfil, reprint or support your order. You can ask us to delete your information sooner — see below.
Your choices
You can ask us to:
- tell you what personal information we hold about you;
- correct anything that is wrong (you can also update your name and phone yourself in your account);
- delete your information, including your uploaded photo and any models made from it, where we are not required to keep it;
- close your account.
Email info@dreamcityventures.com and we will respond within a reasonable time. Depending on where you live, you may have additional rights under laws such as the Texas Data Privacy and Security Act, and we will honour requests made under them.
Children
This site is not directed to children under 13 and we do not knowingly collect their personal information. Adults do sometimes order figurines made from photographs of their own children — if you upload a photo of a child, you are confirming you are their parent or guardian, or have that person's permission. If you believe a child has given us information directly, contact us and we will delete it.
Where we operate
We operate in the United States and our providers process data there. If you use the site from elsewhere, your information will be transferred to and processed in the United States.
Changes to this policy
If we change this policy we will update the date at the top of this page. Material changes affecting how we use information you have already given us will be notified by email where we hold your address.
Contact us
Dream City Ventures
1000 Ballpark Way, Ste 310
Arlington, TX 76011
info@dreamcityventures.com