Privacy policy.

Dream[OS] (operated by Moises Villalobos) is the data controller for personal data processed through this website.

• Address: Heredia, Costa Rica.
• Contact email: contact@dreamos.dev
• WhatsApp: +506 8949-4655

This website contains no forms and stores no user profiles. We do not collect data from minors. The only data processed is:

• Server logs (Vercel): IP address, browser user-agent, visited path, and timestamp. Retention per Vercel's plan (typically between 24 hours and 30 days), for security and diagnostic purposes. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) and Article 5 of Law 8968.
• Vercel Analytics (no cookies): we collect aggregated, anonymized metrics — page views, approximate country (by IP, without storing the IP), device, browser, and referrer. Vercel uses a daily-rotated hash to detect unique visitors without assigning persistent identifiers. No cookies are used, no cross-site tracking occurs, and data is not shared with third parties for advertising purposes. More info: Vercel Analytics privacy policy.
• Cookies: none at this time. If we ever add a chat widget or any non-strictly-necessary cookie in the future, we will require your explicit consent.

If you write to us via WhatsApp, email, or Instagram, the data you share (name, number, message) is stored in our internal CRM solely to respond to you and, if you decide to hire the studio, to execute the service. We do not share it with third parties.

Clicking a WhatsApp button transfers you to Meta's app — from that point WhatsApp's privacy policyalso applies.

Under Costa Rica's Law 8968 on the Protection of Individuals with Regard to the Processing of Personal Data, you have the right to:

• Access — know what data we hold about you.
• Rectification — correct inaccurate data.
• Cancellation — request that we delete it.
• Opposition — object to processing for legitimate reasons.

To exercise these rights, write to us at contact@dreamos.dev. We respond within a maximum of 10 business days.

The supervisory authority in Costa Rica is the Agency for the Protection of Inhabitants' Data (Prodhab). If you are visiting from the EU, you may also contact your national data protection authority.

The site is served over HTTPS with HSTS preload, strict security headers (CSP, X-Frame-Options, Referrer-Policy), and exposes no administrative interfaces in production. The source code is in a private GitHub repository with two-factor authentication.

If we materially modify this policy the 'Last updated' date above will change and, when appropriate, we will notify you through the same channel with which you initiated contact.