Privacy Policy
Last updated: 28 September 2026
This policy explains what personal data Dream Studios collects on dreamstudios.app and through our ordering service on Discord, why, and what you can do about it. We collect as little as we can, we never sell your data, and we don't use advertising or analytics trackers.
Who we are
Dream Studios is a thumbnail studio for YouTubers, based in Portugal. We decide how your data is used, so we are the controller under the EU General Data Protection Regulation (GDPR). For anything about your data, email [email protected].
What we collect and why
Contact form. When you send the form, we receive your name or channel name, email, Discord username, YouTube channel (if you give it), what you need and your message. We use them only to reply to you and to set up your service. Legal basis: steps you asked for before a contract (GDPR Art. 6(1)(b)).
Job applications. When you apply on dreamstudios.app/join, we receive your name, email, Discord username, X handle (if you give it), portfolio link, timezone, availability, what you tell us about yourself, your English level, how you prefer to be paid, what you expect to earn and whether you can do calls. We use them only to consider you for work with us. Legal basis: your consent, which you give on the form and can withdraw at any time (Art. 6(1)(a)).
Orders on Discord. To run your orders, our bot uses your Discord username and user ID, your server and channel IDs, and what you put in each request (title, idea, category, deadline, files and messages). Legal basis: performing our contract with you (Art. 6(1)(b)).
Payments. Payments go through Stripe. We receive the amount, the currency, the date, the payment status and the email you give Stripe. We never see or store your full card details. We keep payment records because the law requires it (Art. 6(1)(c)).
Security. The contact form is protected by Cloudflare Turnstile, which checks technical signals from your browser to tell people from bots. Our hosting provider, Cloudflare, also handles technical data such as your IP address to deliver the site and protect it from abuse. Legal basis: our legitimate interest in keeping the site and service secure (Art. 6(1)(f)).
Your browser. The site stores one item in your browser's local storage, ds-intro-seen, so the intro plays only on your first visit. It holds no personal data, and you can delete it at any time. We don't use cookies for tracking or advertising.
YouTube view counts. The view counts on the site are fetched by our server from the YouTube Data API. Your browser does not connect to YouTube unless you follow a link to a video.
Who we share it with
We share data only with the providers that run the service for us, and only what they need:
- Cloudflare (hosting, security and Turnstile)
- Discord (contact messages and job applications reach private channels only our team can see, and orders happen on Discord)
- Stripe (payments)
- Our email provider (when we write to you)
Some of these providers are based in the United States. Transfers are covered by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses. We may also share data when the law requires it, for example with the tax authorities.
The artist who designs your thumbnail sees your request and files, but not your payment details.
How long we keep it
- Contact form messages: up to 12 months, unless they lead to an order.
- Job applications: up to 12 months, or until you ask us to delete yours.
- Orders and files: while you are a client, and up to 12 months after your last order.
- Payment and invoice records: for as long as Portuguese tax and accounting law requires.
- Security data held by Cloudflare: for the short periods set by Cloudflare.
Your rights
You can ask us to see, correct, delete or export your data, to restrict how we use it, or you can object to how we use it. Email [email protected] and we will answer within one month. We may need to keep some data when the law requires it, such as payment records.
If you think we handle your data unlawfully, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt), or to the authority in your own country.
Children
Our service is for YouTubers aged 16 or over. If you are younger, a parent or guardian must contact us on your behalf.
Changes
If we change this policy, we will update the date at the top. If a change affects how we use data we already have, we will tell our clients on Discord first.