Privacy & data security

1. Controller and scope

This notice covers the Dream Lab website, reading and listening views, Academy tools and downloads. Contact us at the address above for privacy questions or to exercise your rights. Swiss data protection law applies; the GDPR and other mandatory rules apply where their conditions are met.

2. At a glance

• We use Cloudflare Web Analytics for aggregate website statistics without analytics cookies. Advertising pixels, social plugins, embedded videos, contact forms and AI chat are not integrated.
• Search and bookmarks operate in your browser. Search terms are not submitted to us.
• When you use the relevant functions, your language, bookmarks, listening positions and Academy tool entries are saved locally in this browser.
• Opening pages or downloading files requires technical processing by the hosting infrastructure.

3. Hosting, access data and downloads

The site is delivered through ChatGPT Sites by OpenAI using Cloudflare infrastructure. Delivery and security involve technical request data, including IP address, request time, requested page or file, browser/device information and response status. Recipients include OpenAI and its hosting/security suppliers, including Cloudflare. The additional website statistics are described in the following section. We do not operate a separate download tracking database. Fonts, images, audio and PDFs are served from this website.

Our site has no registration or login function. If you separately use ChatGPT or encounter platform security checks, the platform’s own notices apply to that processing.

Website statistics and opting out

On blueoceandreamlab.ai we use Cloudflare Web Analytics, provided by Cloudflare, Inc., to review aggregate page views, visits, popular content, visitor countries, device types and loading performance. Countries are approximate technical estimates, not precise locations. The statistics do not establish whether you finished reading an article or listening to an audiobook.

Your browser loads a script from static.cloudflareinsights.com and sends page and performance data to cloudflareinsights.com. These include the page address, referring page, timing and performance values and technical browser information. Cloudflare necessarily receives your IP address when the connection is made. According to Cloudflare, it discards that address at the nearest processing data centre and does not store it in core RUM databases or logs. The measurement uses no analytics cookies and does not access your bookmarks, search terms, listening positions or Academy tool entries. Individual visitors are not tracked across different websites.

We use these statistics to improve content and usability. Where the GDPR applies, we rely on our legitimate interest in improving the service for this limited measurement (Article 6(1)(f)). Cloudflare processes data internationally; the recipient and international-transfer information below also applies. We receive aggregate reports, not a list of identified people. A binding retention period for this Analytics account has not been provided in the website configuration; contact us for further information.

You can disable measurement in this browser using the button below. Only your objection is saved locally under dream-analytics-disabled until you reverse it or clear website data. We also respect Do Not Track and Global Privacy Control. If the preference cannot safely be read, analytics is not loaded. Opting out applies to future page loads and does not delete aggregate statistics already created.

Cloudflare: measurement data and privacy information

4. Local storage and your choices

The key dream-language remembers your selected language. The key dream-saved stores the identifiers of resources you bookmark using the star. These values have no automatic expiry and remain in this browser until removed by you or the browser. Our application does not transmit them to us or synchronise them between devices. Neither key is used for advertising or profiling. You can browse and download without bookmarking anything.

The Academy tools store your optional pipeline entries, activity figures, KASH self-assessments, history and focus notes under dream-horizon-kiss-kash-v1. Listening positions use keys beginning with dream-audio:. Older tool entries may remain in the history. Our page code does not send these data to us or synchronise them between devices. Please do not enter sensitive health information or confidential information about other people. Clearing this website’s data in your browser also removes its saved tool entries and listening positions. The button below removes only language and bookmarks; it leaves tool data and listening positions intact.

Remove a bookmark by selecting its star again, clear this website’s data in your browser, or use the button below. Clearing local preferences does not delete hosting logs or email correspondence. Security infrastructure can use necessary cookies independently of our page code.

5. Contact by email

If you email dr@svengoebel.com, we process your email address, name if provided, message and attachments to respond and handle the matter. Our mailbox uses Gmail by Google. Email is sent only when you choose to send it in your email application; clicking an email link does not submit a website form. Please do not send passwords, payment-card details or sensitive health information. Messages are not used to subscribe you to a newsletter or to profile you automatically.

6. Purposes and legal grounds

Technical processing supports delivery, availability, abuse prevention and security. Correspondence supports answering your request and, where relevant, preparing or performing a contractual relationship. Where the GDPR applies, grounds are legitimate interests in running a secure website and handling general enquiries (Article 6(1)(f)), pre-contractual or contractual steps where applicable (Article 6(1)(b)), legal obligations (Article 6(1)(c)) and consent for any processing specifically based on your consent (Article 6(1)(a)). Local preferences support functions you actively request.

7. Recipients, countries and international transfers

In addition to the hosting recipients above, Google processes email correspondence. These providers operate internationally. Their published information identifies processing in the United States and Europe; OpenAI’s European policy identifies Ireland, and Cloudflare identifies the United States and the European Economic Area. This website does not provide Swiss-only hosting.

Provider privacy information describes adequacy decisions and standard contractual clauses; Cloudflare also describes Swiss–US Data Privacy Framework certification. These are provider statements, not a certification of this website. The exact processing locations, supplier chain and contractual safeguards for this specific Sites account are not exposed in the website configuration and have not been independently verified. Contact us for information about the applicable arrangements. See OpenAI privacy, Cloudflare privacy and Google privacy.

8. Retention

Local preferences remain until deleted as described above. Correspondence is retained while needed to handle the enquiry, any resulting relationship and applicable legal retention or evidence duties, then deleted when those purposes no longer apply. Hosting and security logs follow the providers’ retention rules; a fixed log-retention period for this specific Sites account is not available to us in the site configuration. Details about applicable retention arrangements can be requested at the contact address above.

9. Security and external services

Delivery uses HTTPS. The site code restricts external connections and embedded content through a content security policy. There are no public uploads or forms that submit entries to us. The Academy tools process their input fields locally in the browser. These measures reduce exposure but do not make online communication completely secure. External destinations receive data when you follow their links and are governed by their own notices. AI assists editorial preparation; the site does not offer an AI input field or send search terms or bookmarks to an AI service.

10. Your rights

Subject to the applicable law and its conditions, you can request access, correction or deletion, restriction, portability, and object to processing. You can withdraw consent for processing based on consent without affecting earlier lawful processing. Use dr@svengoebel.com; we may need proportionate proof of identity. You can complain to the Swiss FDPIC or another competent supervisory authority, including the authority in your EU/EEA country where applicable.

11. Changes

This notice describes the current release. New tracking, video embeds, forms or other data-processing features require a fresh assessment and updated information and, where required, choices before activation.