Privacy Policy
Last Updated: January 7, 2026
Welcome to Mercury 91. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.
Information We Collect
Personal Information
We collect the following when you create or manage your account:
- Username, display name, and email address
- Date of birth (for eligibility/age gating)
- Password (handled and stored by Firebase Authentication)
- Optional profile details you choose to add (e.g., avatar, bio)
Usage Information
We automatically collect limited usage analytics to improve the experience:
- Pages visited, navigation events, and timestamps
- Session identifiers stored in your browser for analytics continuity
- Referrer and page titles
- Standard device/network metadata provided by analytics providers (e.g., approximate location, browser/OS, IP as processed by the provider)
Content Data
When you use Mercury 91, we store the content you create:
- Dreams you log (title, dream text, emotions, categories/tags, and any images/audio you upload)
- Privacy setting for each dream (public or private)
- Planet journal widgets you create (content, layout, and any embedded media)
- Engagement metrics generated by the app (resonance/response counts, view counts)
How We Use Your Information
We use your information to:
- Provide, maintain, and improve the app experience
- Create and manage your account and authentication
- Process optional purchases or redemptions (e.g., starlight/planets) if applicable
- Display your public content to others when you choose to make it public
- Keep your private content available only to you and your signed-in devices
- Communicate important updates, security alerts, and support messages
- Monitor performance, detect abuse, and troubleshoot issues
- Analyze usage to improve features and reliability
Cookies and Tracking Technologies
We use cookies and local/session storage to support analytics and product functionality. Analytics events are sent to Firebase Analytics and Google Analytics (gtag). These services may set their own cookies and receive standard device/network metadata. You can adjust your browser settings to manage cookies, but some features may not function correctly without them.
Privacy Controls and Encryption
Private dreams: When you mark a dream as private, the title and dream text are encrypted on your device using AES-GCM before they are sent to Firestore. The encryption key is derived from your authenticated user identity. Only you (signed in with your account) can decrypt and read the private dream content. Public dreams are not encrypted so they can be viewed by others.
Planet journal widgets: Planet widget content is likewise encrypted client-side before storage. Encrypted widgets include an _encrypted flag and are decrypted only for the owning, signed-in user. If decryption fails or you are not the owner, the app will not show the private content.
Media: Images and audio you attach are stored in Firebase Storage. Access to private media follows Firebase security rules tied to your account.
What we can see: We do not have server-side access to the plaintext of your private dreams or planet journal widgets because encryption happens in your browser before upload. Public content remains readable by others and by our services.
Information Sharing
We may share your information in the following circumstances:
- With your consent or at your direction
- To comply with legal obligations
- To protect our rights, privacy, safety, or property
- In connection with a merger, sale, or acquisition
- With service providers who help operate Mercury 91 (e.g., Firebase Auth/Firestore/Storage, analytics providers)
- For content you choose to make public (public dreams or other public posts)
Data Security
We implement technical and organizational measures to protect your data. Private dreams and planet journal widgets are encrypted client-side before storage; public items remain unencrypted so they can be shared. Media files are protected by Firebase security rules. No method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security, but we design features to limit access to your private content to your authenticated account.
User Rights
Depending on your location, you may have rights to:
- Access your personal information
- Correct inaccurate information
- Delete your personal information
- Object to or restrict processing of your information
- Data portability
- Withdraw consent
To exercise these rights, please contact us using the details provided below.
Children's Privacy
Our services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we learn we have collected personal information from a child under 13, we will delete this information.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.
Contact Us
If you have any questions about this Privacy Policy, please contact us at:hello@mercury91.com