How Dreamy sign-in uses your information

When you choose Google sign-in, Dreamy requests your Google account identifier, verified email address, and basic profile information. It uses these details to authenticate you to the application you opened.

Dreamy sends the verified identity to that application's backend through a short-lived, single-use exchange. Google access tokens and client secrets are not sent to the application or its browser. This sign-in service does not request access to Gmail, Drive, Calendar, or your contacts.

The sign-in service stores temporary authentication state and exchange records, which expire within ten minutes and are regularly removed. Request timestamps are retained for up to one hour to limit abuse. Registered application addresses and hashed application credentials remain until the service operator removes them. Each application separately stores its account records and sessions under its operator's control.

Signing in to an application does not grant access to a Dreamy workspace. Contact the operator of your application or workspace for questions about your account, access, or deletion. You can also remove Dreamy's access in your Google account's connections settings.

Updated September 10, 2026.