Privacy Policy & Architectural Data Ethics

This Privacy Policy governs the digital presence, software products, and consulting engagements operated by DreaInno Studio ("DreaInno", "we", "us", or "our"), available via https://dreainno.website and our suite of incubated ventures and public repositories.

By accessing our website, installing our browser extensions, implementing our open source packages, or submitting an architectural inquiry, you acknowledge the terms outlined in this document.

Depending on how you interact with DreaInno, we process the following categories of data:

• Website Forms & Project Inquiries: When you voluntarily submit forms across our website—including the primary Project Inquiry workstation (#contact), the 48-Hour Remediation Sprint intake (fix.html), and the AI Visibility / GEO Audit intake (geo.html)—we collect the information required to evaluate and respond to your request:
  • Identity & Contact Credentials: Your full name, professional or corporate email address, organization or company name, and preferred communication channels.
  • Project Scope & Commercial Parameters: Selected engineering discipline (Web Performance Optimization, Generative Engine Optimization, Chrome Extension Development, Full-Stack Architecture), estimated budget tier, target delivery milestones, and technical project brief.
  • Diagnostic Targets & URL Data: Target website URLs, hostnames, domain names, and technical symptom notes submitted for performance auditing, speed diagnosis, Core Web Vitals remediation, or search engine visibility assessment.
  • Anti-Abuse Verification: Interactive CAPTCHA challenge solutions computed locally on client canvas engines to verify human submission and prevent spam automation.
• Client Contractual & Billing Data: For formally executed master service agreements, we record organizational legal entity names, authorized signatory names and titles, billing addresses, tax identification numbers, and transactional invoicing metadata.
• Automated Technical Log Data: Basic server access logs (HTTP request headers, TLS cryptographic cipher version, user-agent string, and timestamp) collected ephemerally by hosting infrastructure to detect denial-of-service attempts and safeguard network integrity.

Collected information is processed exclusively for legitimate operational and engineering purposes:

• Evaluating architectural requirements and issuing formal proposals within our < 24-hour SLA.
• Conducting engineering sprints, codebase reviews, and ongoing software maintenance.
• Ensuring network security, defending against automated vulnerability probing, and validating human submissions via our canvas CAPTCHA engine.

All communications and project deliverables are stored within encrypted repositories and enterprise-tier workspace infrastructure enforcing modern TLS 1.3 cryptographic protocols.

DreaInno is the proud creator of flagship browser extensions distributed via the official Chrome Web Store. Our extensions are designed under strict Chrome Manifest V3 sandboxing:

Our public open-source libraries (including universal-form-validator and ai-prompt-firewall) are distributed without phone-home telemetry, analytics beacons, or hidden network listeners.

Code execution occurs strictly within the developer's runtime or client browser environment. Developers incorporating our packages retain full sovereign authority over their application data flows.

We maintain strict architectural standards regarding cookies, client storage, and telemetry:

Google Analytics 4 (Measurement ID: G-CS84PPLY54)

Our website employs Google Analytics 4 (GA4), a web analytics service operated by Google LLC ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use Google Analytics solely to measure aggregate traffic volume, monitor Core Web Vitals across geographic regions, evaluate the engagement of our engineering case studies and technical articles, and optimize site accessibility.

• Cookies Deployed: Google Analytics sets first-party HTTP cookies—primarily _ga (used to distinguish unique visitors, typically retained for up to 2 years) and _ga_CS84PPLY54 (used to persist session state, typically retained for up to 2 years)—stored on your device.
• Telemetry Collected: Metrics gathered include truncated/anonymized IP addresses, approximate geographic location (country and metropolitan level; no precise GPS coordinates), device category, browser engine, operating system, referral URL, page paths navigated, session duration, and on-page interaction events (such as audit calculator clicks, technical code block interactions, and documentation view rates).
• IP Anonymization: IP anonymization is permanently activated by default in Google Analytics 4. Your complete IP address is shortened within EU member states or contracting states to the Agreement on the European Economic Area before transmission to Google servers in the United States.
• User Control & Opt-Out: You can block Google Analytics tracking at any time by configuring your browser to reject third-party cookies, using content-blocking extensions (such as uBlock Origin), or by installing the official Google Analytics Opt-out Browser Add-on.

Functional Local & Session Storage

We utilize minimal client-side browser storage (such as sessionStorage and localStorage) strictly for functional UI preferences—such as remembering active portfolio filter states, temporary audit inputs during an active tab session, or theme preferences. This data remains on your local machine and is never transmitted to external databases.

To guarantee resilient global delivery, aesthetic precision, and operational communications, we engage select enterprise technology providers:

• Web Typography Delivery (Google Fonts):
  Our website incorporates fonts from Google Fonts (specifically Space Grotesk and IBM Plex Mono), delivered by Google LLC.
  To render these typefaces smoothly and consistently across all client devices without layout shift, your web browser connects directly to Google's specialized delivery endpoints (fonts.googleapis.com for stylesheet manifests and fonts.gstatic.com for compressed font binaries).
  During this asset retrieval, Google's servers receive standard HTTP request headers, including your device's IP address, requested font URLs, HTTP referrer, and browser user-agent. According to Google's published privacy commitments for Google Fonts, this request data is segregated from other Google services, does not use tracking cookies or user credentials, and is used strictly for font delivery and regional CDN caching. For more information, please consult the Google Privacy Policy.
• Web Analytics (Google Analytics):
  Processes aggregated website traffic and navigation metrics under Measurement ID G-CS84PPLY54, as detailed in Section 06.
• Form Dispatch Service (FormSubmit.co):
  Facilitates encrypted transmission of website form inquiries (contact workstations and remediation requests) directly to our administrative inbox without retaining persistent intermediate records on third-party servers.
• Code Hosting & Version Control (GitHub / Microsoft):
  Hosts our public open-source repositories, release packages, and issue trackers under GitHub's enterprise security and confidentiality policies.

Each third-party processor is chosen for compliance with stringent data confidentiality, modern TLS 1.3 encryption, and GDPR Article 28 data processor obligations.

Regardless of your geographic jurisdiction (including under the EU General Data Protection Regulation (GDPR), UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA)), DreaInno guarantees the following rights:

• Right of Access: You may request a confirmation and copy of any personal communication records we retain.
• Right to Erasure (Be Forgotten): You may request complete deletion of past inquiry records, subject to statutory accounting retention rules.
• Right to Rectification: You may correct inaccurate or obsolete contact details.
• Right to Non-Discrimination: Exercising your data privacy rights will never result in degraded access or differentiated service pricing.

If you have questions regarding this Privacy Policy, wish to exercise your data sovereignty rights, or require formal data processing documentation for an enterprise engagement, please contact our founding architectural desk: