Privacy Policy

Last updated: 20 October 2026

This policy explains what personal data is processed when you visit the Dreamer website (this site) or when you use the Dreamer app for Android. We process as little data as possible, and we comply with the EU General Data Protection Regulation (GDPR).

Who is responsible

Norio BV (Belgium), represented by Litrik De Roy, is the controller. Contact: litrik@norio.be · norio.be

What we process

• Server logs. When you open a page or when the app fetches its image list, our web server records your IP address, the time, the requested URL, the response status and your browser or app user agent. We use this to deliver the site, keep it secure and prevent abuse. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
• Emails you send us. If you contact us, we process your email address and the contents of your message to reply. Legal basis: legitimate interests, or taking steps at your request.

We do not ask you to create an account, we have no forms, and we do not use analytics, advertising or tracking tools. The website sets no cookies.

Crash reporting in the app

The Dreamer app uses Firebase Crashlytics, a service of Google, to receive crash reports. When the app crashes, a report is sent containing technical information such as the device model, Android version, app version, the state of the app at the time and a stack trace. Crashlytics also generates an installation identifier to count affected users. We use this solely to find and fix bugs. Legal basis: legitimate interests (Art. 6(1)(f) GDPR). Apart from crash reports, the app only downloads the image list from this site.

Images from third parties

The Dreamer app displays images that are hosted by their original publishers (such as NASA, ESA, ESO, NOIRLab and Wikimedia Commons). When the app loads an image, your device connects directly to the publisher's server, which may log your IP address under its own privacy policy. We do not control this and receive no data from it.

Sharing and transfers

We do not sell your data or share it for advertising. Our web server is located inside the European Economic Area (EEA) and processes server logs on our behalf. Google (Firebase Crashlytics) processes crash reports on our behalf and may do so in the United States; such transfers rely on the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.

Retention

• Server logs are kept for at most 90 days.
• Crash reports are kept by Crashlytics for 90 days.
• Emails are kept as long as needed to handle your request, and deleted afterwards unless the law requires us to keep them.

Your rights

Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw any consent you gave. We do not use profiling or automated decision-making. To exercise your rights, email litrik@norio.be. We respond within 30 days.

Complaints

If you believe we process your data unlawfully, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, gegevensbeschermingsautoriteit.be, or with the supervisory authority in your own country.

Changes

We may update this policy. The date at the top shows when it last changed.