Privacy Policy | Dreamster

Dreamster DAO LLC | Effective September 22, 2026

This Privacy Policy explains how Dreamster handles personal information across Digital Music Albums (DMAs), DSTER rewards, wallet and blockchain activity, supported payment-stablecoin transaction rails, KYC, payments, and off-ramping.

Dreamster DAO LLC (“Dreamster,” “we,” “our,” or “us”) respects your privacy and is committed to protecting personal information collected in connection with the Dreamster platform.

This Privacy Policy explains how we collect, use, disclose, protect, retain, and otherwise process information when you access or use Dreamster, including Dreamster Music, Dreamster Radio, our websites, applications, accounts, Digital Music Album (“DMA”) features, wallet-related functionality, artist and label upload tools, identity-verification and compliance features, payment and off-ramp features, supported payment-stablecoin transaction rails, DSTER reward and utility features, and related services (collectively, the “Platform”).

Dreamster DAO LLC is organized in the State of Wyoming, United States.

This Privacy Policy should be read together with Dreamster’s Terms and Conditions, Artist / Label Upload, Distribution and Rights Agreement, Digital Music Album Purchase Terms & Risk Disclosure, and any additional notices presented when you use a particular feature or third-party service.

By accessing or using the Platform, you acknowledge the practices described in this Privacy Policy. If applicable law requires consent for a particular type of processing, Dreamster will request that consent where required.

1. INFORMATION WE COLLECT

We may collect information directly from you, automatically when you use Dreamster, from blockchain activity, from artists or other users who are authorized to provide information, and from service providers that help us operate, secure, verify, and support the Platform.

The information collected depends on how you interact with Dreamster, including whether you create an account, purchase or sell a DMA, connect a cryptocurrency wallet, use a credit or debit card, use a supported payment stablecoin, receive or use a DSTER reward, withdraw proceeds to a bank account, upload music, or use artist/label features.

A. Account and Registration Information

When you create or access a Dreamster account, we may collect information such as:

Email address;
Name or display name;
Username;
Profile information;
Account identifiers;
Authentication information;
Login method;
Communication preferences; and
Other information you voluntarily provide.

Users may be able to register or log in using supported third-party authentication methods such as Google or Apple.

When you use a third-party authentication provider, Dreamster may receive information that you authorize that provider to share with us.

2. WALLET AND BLOCKCHAIN INFORMATION

Dreamster may provide or facilitate blockchain wallet functionality as part of a User account, allow a User to connect a supported external wallet, or process transactions involving blockchain addresses.

Information associated with wallet and blockchain functionality may include:

Blockchain wallet address;
Public transaction history;
Supported digital-asset or payment-stablecoin balances, where visible to Dreamster or an integrated provider;
DSTER reward balances or activity, where applicable;
DMA ownership, transfer, purchase, or sell-back information;
Transaction identifiers;
Blockchain network information;
Smart-contract activity;
Supported stablecoin, DSTER, or other token identifiers where applicable;
Wallet-screening or risk indicators;
Counterparty wallet information where available; and
Other publicly available blockchain data.

Blockchain addresses and transaction records may be publicly visible. Depending on the circumstances, blockchain information may be capable of being associated with an identifiable individual and may therefore be treated as personal information under applicable law.

Dreamster may use third-party wallet infrastructure, blockchain analytics, fraud-prevention, and compliance providers to provide or protect wallet functionality and transactions.

Dreamster will never ask you to provide a private key or seed phrase as part of normal KYC, payment, support, or account-verification procedures. You should not submit wallet secrets to Dreamster or its service providers.

3. PAYMENT AND TRANSACTION INFORMATION

When you make a purchase, sell or sell back a DMA, receive transaction proceeds, use a credit card or debit card, use cryptocurrency, or use another supported payment method, information may be processed by Dreamster and independent third-party payment, banking, wallet, or compliance providers.

Depending on the transaction, information may include:

Name;
Billing information;
Payment method;
Transaction amount;
Payment status;
Payment transaction identifier;
Cryptocurrency wallet address;
Digital asset or payment stablecoin used;
Stablecoin type, issuer or infrastructure provider, blockchain/network, and transaction status where applicable;
DSTER reward amount, eligibility event, credit, use, redemption, transfer, or other reward activity where applicable;
DMA purchased, sold, or sold back;
Bank-payout or off-ramp status;
Fraud-prevention and risk information;
Device, IP, or location-related risk information; and
Other transaction-related information.

For card purchases, complete payment-card details may be collected and processed directly by the applicable payment provider. Dreamster may receive transaction confirmation, status, risk, and other information without receiving or storing the complete payment-card number.

Payment and financial-service providers process information under their own terms, privacy policies, security procedures, and legal obligations.

3A. DSTER REWARD AND UTILITY INFORMATION

Dreamster may provide DSTER to eligible Users as a promotional, loyalty, engagement, purchase-related, or Platform-utility reward. DSTER is separate from any payment stablecoin used as a payment, settlement, conversion, or off-ramp rail.

When DSTER features are used, Dreamster and approved service providers may collect, receive, create, or process information such as:

The User account or wallet associated with a DSTER reward;
The qualifying Platform activity associated with the reward;
Reward eligibility, amount, date, time, status, and distribution record;
DSTER balances and transaction history that are visible to Dreamster or recorded on a supported blockchain;
Use, redemption, transfer, burn, or other Platform-utility activity where supported;
Smart-contract, wallet, transaction-hash, network, or token information;
Fraud, abuse, sanctions, wallet-risk, or transaction-monitoring indicators associated with reward activity;
Reward-program terms, consent, and acceptance records; and
Tax, accounting, financial, legal, or compliance information where required.

Dreamster may use this information to administer DSTER rewards and Platform utility, calculate or verify eligibility, prevent duplicate or abusive reward claims, maintain transaction and accounting records, provide support, enforce applicable reward terms, protect Platform security, and comply with applicable law.

DSTER reward data is separate from payment-stablecoin data. The legal and economic terms governing DSTER are described in Dreamster’s Terms and Conditions and Digital Music Album Purchase Terms & Risk Disclosure.

4. IDENTITY VERIFICATION, KYC, AML/CFT, AND SANCTIONS INFORMATION

Certain Dreamster transaction methods require identity verification or Know Your Customer (“KYC”) procedures. The provider used depends on the transaction method selected by the User.

Identity-verification, anti-money-laundering (“AML”), counter-terrorist-financing (“CFT”), sanctions, fraud, and compliance information may include:

Full legal name;
Date of birth;
Residential address;
Country of residence;
Citizenship or nationality where required;
Government-issued identification;
Identification or taxpayer number where required;
Photograph or selfie;
Liveness, facial-verification, face-match, or other biometric-related verification data where used by the provider and permitted by law;
Email address and telephone number;
Verification status or result;
Sanctions, watchlist, politically exposed person, or other compliance-screening results where applicable;
Fraud-risk, device-risk, IP, or location signals;
Wallet ownership or wallet-risk information;
Bank-account ownership information;
Source-of-funds or source-of-wealth information where required;
Purpose of transaction and expected activity; and
Other information reasonably required for legal, regulatory, provider, or compliance purposes.

Some of this information may constitute sensitive personal information under applicable law. Dreamster processes such information for identity verification, transaction eligibility, security, fraud prevention, AML/CFT, sanctions and counter-terrorism screening, legal compliance, and related purposes—not for unrelated behavioral advertising.

4.1 Cryptocurrency-Wallet Purchases — Didit.me

Before a User’s first eligible DMA purchase funded from a connected cryptocurrency or digital-asset wallet, Dreamster requires identity verification through Didit.me.

The Didit.me verification flow may process identity documents, liveness or selfie information, face matching, country or residency information, address information, device or IP information, and sanctions/watchlist or other KYC/AML screening information, depending on the verification workflow configured for the User.

Dreamster may receive verification status, eligibility information, risk or screening indicators, and information reasonably necessary to link the verification to the User’s Dreamster account. Raw identity documents, selfies, biometric templates, or similar information may be processed directly by Didit.me rather than stored by Dreamster, depending on the integration and applicable provider practices.

Successful initial Didit.me verification generally satisfies Dreamster’s initial KYC requirement for subsequent eligible wallet-funded purchases through the same verified Dreamster account. Dreamster or Didit.me may require re-verification, refreshed information, enhanced due diligence, or additional screening when reasonably required by law, risk controls, material account changes, suspicious activity, or compliance requirements.

4.2 Credit and Debit Card Purchases — Wert

Before a User completes the User’s first eligible DMA purchase by credit card or debit card through Dreamster’s Wert integration, the User must complete the KYC or identity-verification process required by Wert and Dreamster for that payment method.

Wert may collect information such as legal name, date of birth, email address, address, telephone number, government-issued identification, selfie or identity-verification information, payment information, and other compliance information. Wert independently controls its KYC, transaction-approval, risk, and payment processes.

Dreamster may receive verification or transaction status, approval or rejection information, payment status, fraud or compliance signals, and other information necessary to determine whether the applicable card-funded transaction can proceed. Dreamster generally does not need to receive the complete card number to confirm the transaction.

Dreamster treats the initial Wert verification as the User’s initial KYC for eligible card-funded DMA purchases; however, Wert or Dreamster may require renewed or additional verification if law, payment-network rules, transaction limits, risk controls, or provider requirements change.

4.3 Off-Ramping and Bank Payments — Bridge.xyz

Before a User may off-ramp eligible DMA sale or sell-back proceeds, convert eligible digital-asset proceeds to fiat for bank delivery, or receive an eligible payment to a bank account through Bridge.xyz, the User must complete Bridge.xyz customer onboarding and KYC and satisfy applicable eligibility requirements.

Bridge.xyz may process information such as legal name, address, date of birth, email address, telephone number, Social Security number or other taxpayer/national identification number where applicable, government-issued identification, proof of address, bank-account information, wallet information, source-of-funds information, purpose of transaction, and other compliance documentation.

Dreamster may receive onboarding status, eligibility status, transaction status, payout information, compliance or risk information, and other information necessary to determine whether the User can use the Bridge.xyz off-ramp or bank-payment functionality.

Completion of Didit.me or Wert verification does not automatically satisfy Bridge.xyz onboarding, and completion of Bridge.xyz verification does not automatically satisfy another provider’s requirements. Each provider may require additional or renewed verification under its own rules and applicable law.

4.4 Payment Stablecoins and Stablecoin-Provider Information

Dreamster may use or integrate supported payment stablecoins and stablecoin-based infrastructure to facilitate settlement, transfers, DMA purchases, sell-backs, wallet movements, conversions, or off-ramping. Unless Dreamster expressly identifies itself in writing as the issuer of a particular payment stablecoin, the applicable stablecoin is issued or serviced by an independent third party and may be subject to that provider’s privacy policy, terms, eligibility rules, redemption procedures, and legal obligations.

In connection with supported payment-stablecoin activity, Dreamster and applicable providers may process information such as:

Stablecoin type and applicable issuer or infrastructure provider;
Blockchain or network;
Wallet addresses and transaction identifiers;
Transaction amount, date, time, status, and counterparty information where available;
Conversion, settlement, redemption, or off-ramp status;
KYC, sanctions, wallet-risk, fraud, geographic, or transaction-eligibility information;
Source-of-funds, purpose-of-transaction, or related compliance information where required; and
Other information reasonably necessary to operate the transaction or comply with provider and legal requirements.

Dreamster and its providers may process this information to operate supported payment and settlement flows; determine whether a stablecoin, network, transaction, or User is eligible; prevent fraud and financial crime; conduct AML/CFT and sanctions controls; respond to provider requirements; and comply with applicable payment-stablecoin, banking, payments, consumer-protection, and other laws, including the GENIUS Act and implementing requirements to the extent applicable and as they become effective.

Dreamster may restrict, replace, pause, or discontinue a stablecoin, blockchain, provider, or transaction path where reasonably necessary because of legal, regulatory, sanctions, AML/CFT, cybersecurity, operational, consumer-protection, or provider-compliance concerns.

5. BANK WITHDRAWAL AND OFF-RAMP INFORMATION

If you use a supported bank withdrawal, bank payout, or off-ramp feature, information necessary to facilitate the transaction may be processed by Dreamster, Bridge.xyz, banks, payment rails, or other financial-service providers.

This may include:

Account holder name;
Bank account information;
Routing or equivalent banking information;
Withdrawal, payout, or conversion amount;
Transaction status;
Currency and payment rail;
Identity-verification information;
Wallet, blockchain, and supported stablecoin transaction information;
Stablecoin conversion, settlement, or redemption information where applicable;
Source-of-funds or transaction-purpose information where required; and
Compliance information.

Financial institutions and providers may delay, reject, return, investigate, or review a transaction. Dreamster may receive information concerning that status and may retain records necessary to administer, reconcile, investigate, or support the transaction.

6. ARTIST, LABEL, RIGHTS, AND MUSIC INFORMATION

If you are an artist, label, distributor, producer, rights holder, licensor, collaborator, authorized representative, or other User who uploads music or related content, we may collect additional information relating to you, your content, the rights you control, and your authorization to use the Platform.

This may include:

Artist name;
Legal or business name;
Authorized representative or signatory information;
Contact information;
Music and audio files;
Stems, remixes, edits, samples, beats, or related files;
Album or single artwork;
Photographs, videos, biographies, names, voices, likenesses, or promotional materials;
Song title, album, genre, release, and catalog information;
ISRC, UPC, ISWC, and other music identifiers;
Master ownership or control information;
Songwriter, publisher, administrator, PRO/CMO, and composition information;
Ownership percentages and collaborator splits;
Featured performer, producer, session musician, and contributor information;
Territorial, term, exclusivity, monetization, distribution, transfer, or other rights restrictions;
Rights-holder and licensor information;
Documentation demonstrating ownership, control, licensing, consent, clearance, or authorization;
Sample, interpolation, cover, remix, beat-license, artwork, voice/likeness, or other third-party permissions;
Artist-provided Perks or benefits;
Payout or wallet information;
Upload certifications, agreement versions, and acceptance records;
Content fingerprints, hashes, technical file information, and screening status; and
Other information required through the artist/label upload, verification, or rights-management process.

Artists and other Uploaders are responsible for ensuring that information concerning collaborators, rights holders, performers, producers, writers, publishers, or other third parties is submitted lawfully and that the Uploader is authorized to provide it to Dreamster.

6.1 NO-AI-MUSIC POLICY AND AUTOMATED MUSIC INTEGRITY SCREENING

Dreamster does not allow AI-generated audio on the Platform. To enforce this rule and protect artists, rights holders, and Users, Dreamster may use automated artificial-intelligence detection, audio analysis, fingerprinting, duplicate-content detection, metadata analysis, fraud detection, and other content-integrity technologies to evaluate Uploaded Content before or after publication.

When an artist or label uploads audio, Dreamster and approved service providers may process or derive information such as:

The uploaded audio file or relevant portions of the file;
Audio fingerprints, hashes, acoustic features, or other technical representations;
File format, duration, encoding, creation or upload timestamps, and related technical metadata;
AI-generated, synthetic, cloned-voice, manipulated-audio, or similar detection indicators;
Detection classifications, confidence or risk indicators, screening status, and review outcomes;
Duplicate or similarity matches to previously submitted or known content;
Metadata inconsistencies, ISRC conflicts, or other rights/fraud indicators;
Account, device, IP, session, and upload-event information reasonably necessary to prevent circumvention or investigate abuse;
Manual-review notes or escalation status; and
Supporting evidence of human authorship, human performance, recording provenance, contributor authorization, or rights ownership/control when requested.

Dreamster may transmit Uploaded Content or derived technical information to approved AI-detection, audio-analysis, fingerprinting, rights-management, fraud-prevention, or content-integrity providers as reasonably necessary to perform these functions. Those providers may process information under their own contractual, security, privacy, and legal obligations.

Automated screening is a compliance and integrity tool and may not be error-free. Screening results may be considered together with manual review, rights documents, provenance evidence, third-party information, prior claims, or other evidence. An upload may be held, rejected, prevented from DMA deployment, demonetized, removed, suspended, or escalated for additional review when Dreamster reasonably determines that it may violate the no-AI-music policy, rights requirements, fraud rules, or other Platform policies.

Dreamster may retain content hashes, fingerprints, screening results, review history, and related evidence for a reasonable period after an upload is rejected or removed where necessary to detect repeat prohibited uploads, prevent circumvention, investigate rights disputes or fraud, enforce agreements, preserve evidence, or comply with law.

Dreamster does not need to disclose proprietary detection thresholds, models, vendors, confidence-score formulas, anti-circumvention methods, or other security-sensitive details where disclosure could undermine Platform integrity or provider security.

7. DREAMSTER RADIO INFORMATION

Music approved for Dreamster may also be made available through Dreamster Radio in accordance with Dreamster’s Terms, applicable licenses, and artist or rights-holder permissions.

Information displayed or processed in connection with Dreamster Radio may include:

Artist name;
Song title;
Album or release information;
Artwork;
Music metadata;
ISRC or other track identifiers;
DMA-related information;
Links to applicable music or DMA pages; and
Other information associated with identifying, reporting, promoting, or administering the music.

8. INFORMATION RECORDED ON BLOCKCHAINS OR DECENTRALIZED NETWORKS

Certain Dreamster activities may involve public blockchains or decentralized storage networks.

Information recorded through these systems may include:

Wallet addresses;
DMA, DSTER, stablecoin, or other supported token identifiers where applicable;
Transaction records;
Ownership records;
Transfers;
Timestamps;
Smart-contract activity;
Music-related metadata; and
Other blockchain-related information.

Blockchain transactions generally create records that may be publicly accessible and may be difficult or impossible to alter or delete after confirmation.

Dreamster may also use decentralized or persistent-storage technology for certain DMA, token, transaction, or music metadata. Users and artists should not intentionally submit sensitive personal information for publication on a public blockchain or permanent decentralized storage system unless specifically required.

9. AUTOMATICALLY COLLECTED INFORMATION

When you access Dreamster, we may automatically collect information concerning your interaction with the Platform.

This may include:

IP address;
Device type;
Browser type;
Operating system;
Device identifiers;
Approximate location derived from IP address;
Login activity;
Pages or screens viewed;
Features used;
Referral source;
Session information;
Date and time of access;
Error information;
Security events;
Fraud or device-risk signals;
VPN, proxy, or location-consistency signals where used for security or compliance; and
Other technical usage information.

We may use cookies, software development kits, application programming interfaces, logs, pixels, local storage, and similar technologies to collect this information where appropriate.

10. HOW WE USE INFORMATION

Dreamster may use information to:

Create, maintain, authenticate, and secure User accounts;
Provide wallet-related functionality and associate verified Users with eligible transaction methods;
Facilitate DMA purchases, sales, sell-backs, transfers, and other supported transactions;
Administer DSTER rewards and eligible Platform-utility activity;
Process or facilitate supported payment-stablecoin settlement, conversion, transfer, or off-ramp flows;
Process or facilitate card purchases through Wert;
Verify Users for cryptocurrency-wallet purchases through Didit.me;
Facilitate eligible off-ramping and bank payments through Bridge.xyz;
Verify identity and transaction eligibility;
Conduct AML/CFT, sanctions, counter-terrorism, wallet-risk, fraud, source-of-funds, and geographic eligibility reviews;
Review artist and label submissions and verify rights, ownership, authorization, contributor information, and metadata;
Detect AI-generated audio, synthetic or cloned voices, duplicate content, unauthorized content, fraud, or attempts to circumvent content screening;
Evaluate human-authorship, performance provenance, rights documents, and other supporting evidence where needed;
Operate Dreamster Radio and related reporting or promotional features;
Administer artist Perks and benefits;
Maintain agreement, certification, consent, transaction, and audit records;
Provide customer support and communicate with Users;
Prevent fraud, account compromise, manipulation, abuse, or unauthorized access;
Protect Users, artists, rights holders, Dreamster, and service providers;
Maintain Platform security and enforce our Terms, upload rules, no-AI-music policy, and other policies;
Respond to copyright, ownership, payment, identity, fraud, sanctions, or other claims and disputes;
Comply with applicable laws, regulations, court orders, sanctions requirements, and lawful requests;
Evaluate and satisfy legal or provider obligations that may apply to DMAs, DSTER, payment stablecoins, blockchain transactions, securities, commodities, banking, payments, money transmission, tax, consumer protection, privacy, or other regulated activity;
Diagnose technical problems and improve Platform functionality;
Analyze Platform performance and reliability; and
Develop new Dreamster services and features consistent with this Privacy Policy and applicable law.

We may also use information for other purposes disclosed to you at the time the information is collected or where otherwise permitted by applicable law.

11. FRAUD, AML/CFT, SANCTIONS, COUNTER-TERRORISM, AND SECURITY MONITORING

Dreamster may analyze User, account, identity, wallet, payment, bank, transaction, device, IP, location, blockchain, and other information to identify or prevent:

Fraud;
Account compromise;
Suspicious transactions;
Money laundering;
Terrorist financing or material support for prohibited terrorist activity;
Transactions involving sanctioned, blocked, or otherwise prohibited persons, entities, organizations, wallets, countries, territories, or regions;
Sanctions or geographic-restriction evasion;
Stolen assets or illicit proceeds;
Market or Platform manipulation;
Reward abuse, duplicate reward claims, or manipulation of DSTER or DMA-related Platform features;
Unsupported or prohibited stablecoin, wallet, or transaction activity;
Unauthorized access;
Identity misuse or impersonation;
KYC circumvention;
Use of nominees, intermediary wallets, false addresses, multiple accounts, VPNs, or other methods intended to misrepresent eligibility; and
Other unlawful or abusive behavior.

Dreamster may use internal systems and third-party identity, compliance, sanctions, fraud, wallet-screening, blockchain-analytics, payment, and financial-service providers for these purposes.

A successful identity-verification result does not guarantee transaction approval. Dreamster and its providers may separately consider sanctions risk, geographic eligibility, wallet risk, payment risk, fraud indicators, transaction purpose, source of funds, provider requirements, and other compliance factors.

Transactions or accounts may be delayed, rejected, restricted, suspended, terminated, or referred for additional review when reasonably necessary for compliance, fraud prevention, security, or legal obligations. Where disclosure is prohibited or could undermine an investigation or security control, Dreamster may be unable to explain certain compliance actions in detail.

12. HOW WE SHARE INFORMATION

We may disclose information as reasonably necessary to operate, secure, verify, enforce, and support Dreamster.

Service Providers

We may share information with companies that provide services such as:

Authentication and account infrastructure;
Wallet infrastructure;
Payment processing;
Credit/debit-card purchase services, including Wert;
Identity verification and KYC, including Didit.me;
Banking, off-ramp, payout, stablecoin orchestration, and financial infrastructure, including Bridge.xyz;
Payment-stablecoin issuers, custodians, conversion, settlement, redemption, or other stablecoin infrastructure providers where applicable;
DSTER reward, token, smart-contract, wallet, accounting, or Platform-utility infrastructure providers where applicable;
AML/CFT, sanctions, counter-terrorism, fraud, and watchlist screening;
Blockchain analytics and wallet screening;
AI-generated-audio detection;
Audio analysis, fingerprinting, duplicate-content detection, and content-integrity screening;
Rights-management or content-claim support;
Hosting and cloud infrastructure;
Cybersecurity;
Customer support;
Email communications;
Analytics; and
Other technical or operational infrastructure.

These companies may process information according to their own contractual, privacy, security, and legal obligations. Depending on the service, the third party may collect information directly from you or receive information from Dreamster.

Artists, Labels, Collaborators, and Rights Holders

Certain information may be shared with artists, labels, collaborators, rights holders, licensors, or authorized representatives when reasonably necessary to administer a Perk, payment split, benefit, event, reward, rights claim, purchase, upload, or other artist-to-fan or rights-management interaction.

We seek to limit such information to what is reasonably necessary for the applicable purpose.

Legal, Regulatory, Sanctions, and Law-Enforcement Authorities

We may disclose information when we reasonably believe disclosure is necessary or permitted to:

Comply with applicable law, regulation, sanctions requirements, or binding legal process;
Respond to subpoenas, court orders, warrants, regulatory requests, or other lawful requests;
Cooperate with law enforcement, financial-intelligence units, sanctions authorities, regulators, courts, or other competent authorities;
Investigate suspected criminal activity, terrorist financing, sanctions violations, fraud, theft, money laundering, or other financial crime;
Enforce Dreamster’s Terms and Conditions, Artist / Label Agreement, Digital Music Album Purchase Terms & Risk Disclosure, DSTER reward or utility terms, no-AI-music policy, rights requirements, or other policies;
Protect Dreamster’s rights, Users, artists, rights holders, providers, or the public; or
Address threats to security, safety, or Platform integrity.

Business Transactions

If Dreamster is involved in a merger, financing, acquisition, restructuring, asset sale, reorganization, bankruptcy, or similar corporate transaction, information may be disclosed as part of evaluating or completing that transaction, subject to applicable law.

13. WE DO NOT SELL PERSONAL INFORMATION FOR UNRELATED ADVERTISING

Dreamster does not intend to operate as a data broker.

We do not sell personal information to unrelated third parties simply so those parties can independently market their products or services to you.

We do not use government identification, KYC information, bank information, wallet-risk information, payment-stablecoin compliance information, DSTER reward-risk information, biometric-related identity-verification data, or artist AI-screening results for unrelated behavioral advertising.

If Dreamster’s practices change in a way that triggers legally defined “sale,” “sharing,” targeted advertising, or similar requirements under applicable privacy law, Dreamster will provide any notices and choices required by applicable law.

14. COOKIES AND SIMILAR TECHNOLOGIES

Dreamster may use cookies and similar technologies to:

Keep Users logged in;
Remember preferences;
Authenticate accounts;
Maintain Platform security;
Prevent fraud;
Support compliance and transaction-integrity checks;
Analyze Platform use;
Diagnose technical issues; and
Improve the User experience.

Where required by applicable law, Dreamster will provide cookie notices or choices. Browser settings may allow Users to block or delete some cookies; disabling certain technologies may prevent portions of Dreamster from functioning correctly.

15. DATA SECURITY

Dreamster uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, destruction, misuse, or loss.

These measures may include access controls, authentication systems, encryption, security monitoring, infrastructure protections, vendor controls, least-privilege access, and limitations on employee or contractor access.

No internet, blockchain, software, wallet, AI-screening, payment, or electronic-storage system can be guaranteed to be completely secure.

Users are responsible for protecting their own account credentials, devices, authentication methods, payment credentials, and wallet information. Never send Dreamster your private wallet key or seed phrase.

16. DATA RETENTION

Dreamster retains personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

Provide and maintain the Platform;
Maintain User accounts;
Process, reconcile, and support transactions;
Administer and audit DSTER rewards and Platform-utility activity;
Maintain supported stablecoin transaction, settlement, conversion, and provider records where applicable;
Maintain business, accounting, tax, financial, and compliance records;
Complete KYC/AML/CFT/sanctions and fraud obligations;
Maintain artist rights, upload, certification, and agreement records;
Preserve content fingerprints, hashes, screening results, or review history where reasonably necessary to prevent repeated prohibited uploads or circumvention;
Resolve disputes and rights claims;
Prevent fraud and protect Platform security;
Enforce agreements and policies;
Respond to legal holds, investigations, audits, governmental inquiries, or provider requirements; and
Comply with applicable law and reporting obligations.

Different categories of information may be retained for different periods. KYC providers, payment providers, banks, blockchain networks, and other third parties may have independent retention obligations that differ from Dreamster’s.

For artist and label uploads, Dreamster may retain the agreement version, certification event, content fingerprint/hash, metadata, screening status, rights documents, claim history, and related audit evidence for a reasonable period after content is removed or an account is closed where necessary for rights management, fraud prevention, dispute resolution, enforcement, or legal compliance.

When information is no longer reasonably required, Dreamster may delete, anonymize, aggregate, or otherwise dispose of it, subject to applicable law and technical limitations. Information permanently recorded on a blockchain or decentralized storage network may not be capable of being deleted by Dreamster.

17. ACCOUNT DELETION

Users may request deletion of an eligible Dreamster account by contacting: [email protected]

Deleting an account does not necessarily delete:

Public blockchain transactions;
Wallet addresses recorded on public blockchains;
Information stored through permanent or decentralized networks;
Records required for legal, regulatory, KYC/AML/CFT, sanctions, fraud, tax, accounting, or financial-compliance purposes;
Payment, stablecoin, bank-payout, off-ramp, DSTER reward, and transaction records;
Fraud-prevention or security records;
Artist rights, upload certifications, agreement records, content hashes/fingerprints, or AI/content-screening records reasonably needed to prevent circumvention or resolve claims;
Information required to resolve disputes, rights claims, chargebacks, investigations, or litigation; or
Information Dreamster or an applicable provider is legally required or permitted to retain.

Dreamster will process valid deletion requests in accordance with applicable law. A request directed to Dreamster may not automatically delete information held independently by Didit.me, Wert, Bridge.xyz, a bank, a blockchain, or another third party; you may need to contact that provider directly where applicable.

18. YOUR PRIVACY RIGHTS

Depending on where you live, you may have privacy rights concerning your personal information.

These may include the right to:

Request access to personal information;
Request correction of inaccurate information;
Request deletion of certain information;
Receive information regarding how data is processed;
Request a copy of certain information;
Opt out of certain processing where required by law;
Withdraw consent where processing is based on consent;
Request restriction or object to certain processing where applicable;
Request additional review of certain automated or significant decisions where applicable law provides that right; and
Appeal certain privacy decisions where applicable.

These rights are not absolute and may be subject to legal, security, fraud-prevention, financial-compliance, blockchain, contractual, or other exceptions.

Dreamster may need to verify your identity before fulfilling a privacy request. Requests involving data collected directly by Didit.me, Wert, Bridge.xyz, a payment-stablecoin issuer or infrastructure provider, a bank, or another independent provider may also need to be directed to that provider.

If you believe an artist upload was incorrectly flagged by automated music-integrity screening, you may contact Dreamster Support and provide relevant proof of human authorship, performance, recording provenance, or rights. Dreamster may conduct additional review where reasonably available or required by law; this does not guarantee that the content will be approved or restored.

To make a privacy request, contact: [email protected]

19. CALIFORNIA PRIVACY RIGHTS

California residents may have additional rights under California privacy law.

Subject to applicable thresholds, definitions, and exceptions, these may include rights to:

Know what categories of personal information are collected;
Know the purposes for which information is used;
Know categories of third parties to whom information is disclosed;
Request access;
Request correction;
Request deletion;
Obtain certain information in a portable format; and
Opt out of certain sales, sharing, or targeted uses if applicable.

Certain identity, financial, security, fraud-prevention, and compliance information may be treated as sensitive personal information under California law. Dreamster uses such information for permitted purposes such as identity verification, payment processing, security, fraud prevention, legal compliance, and transaction eligibility.

Dreamster will not unlawfully discriminate against a User for exercising applicable privacy rights.

20. INTERNATIONAL USERS AND CROSS-BORDER PROCESSING

Dreamster is operated by a United States company. If you access Dreamster from outside the United States, your information may be transferred to and processed in the United States or other countries where Dreamster or its service providers operate.

This may include processing by identity-verification, payment, banking, stablecoin, off-ramp, reward/token infrastructure, cloud, security, blockchain, and content-screening providers. Those jurisdictions may have privacy laws different from those in your country.

Where required by applicable law, Dreamster will implement mechanisms intended to support lawful cross-border processing and will provide additional notices or rights where required.

Users remain responsible for determining whether their use of Dreamster is lawful in their jurisdiction. Dreamster may restrict services based on sanctions, provider availability, financial regulations, age requirements, or other legal or compliance restrictions.

21. SANCTIONS, RESTRICTED JURISDICTIONS, TERRORIST DESIGNATIONS, AND PROHIBITED PARTIES

Dreamster does not permit transactions or services that Dreamster or an applicable provider is prohibited from offering under applicable sanctions, counter-terrorism laws, trade restrictions, financial-crime rules, or binding provider requirements.

Dreamster may process information concerning a User’s identity, citizenship or residence where required, location, IP address, device, wallet activity, blockchain counterparties, DMA or DSTER activity, supported stablecoin transaction information, bank information, source of funds, or verification results to determine whether access to a service, reward, payment rail, or transaction is permitted.

Dreamster may block, reject, restrict, suspend, or terminate access involving sanctioned or blocked persons, sanctioned entities, prohibited jurisdictions, sanctioned wallet addresses, designated terrorist persons or organizations, prohibited counterparties, or activity presenting material sanctions, terrorist-financing, fraud, or other financial-crime risk.

Dreamster may also process information to identify attempts to bypass restrictions using false identification, false addresses, VPN or location masking, alternate accounts, intermediary wallets, nominees, misrepresented beneficial ownership, or other circumvention methods.

Where required or permitted by applicable law, Dreamster may preserve and disclose relevant information to law-enforcement agencies, regulators, sanctions authorities, financial-intelligence units, courts, banks, payment providers, or other competent authorities. Dreamster may be prohibited from notifying a User about certain disclosures, investigations, or restrictions.

22. CHILDREN’S PRIVACY

Dreamster is not intended for children under the age of 13.

Dreamster does not knowingly collect personal information from children under 13 without legally required parental authorization. If we learn that personal information from a child under 13 has been collected in violation of applicable law, we will take reasonable steps to address the information.

Parents or guardians who believe a child has improperly provided personal information may contact: [email protected]

Certain Dreamster services involving financial transactions, digital assets, wallet functionality, KYC, card payments, or bank withdrawals may require Users to be older than 13, may be limited to adults, or may be subject to additional age requirements imposed by Dreamster or a third-party provider.

23. THIRD-PARTY WEBSITES, PROVIDERS, AND SERVICES

Dreamster may contain links or integrations connecting Users to independent third-party websites, wallets, applications, payment services, identity-verification providers, banks, social networks, content-screening services, or other services.

Providers may include Didit.me for wallet-purchase identity verification, Wert for eligible credit/debit-card purchases, Bridge.xyz for eligible stablecoin orchestration, off-ramping and bank payments, payment-stablecoin issuers or infrastructure providers, DSTER reward/token infrastructure providers, wallet infrastructure providers, banks, payment processors, blockchain networks, blockchain analytics providers, and AI/audio content-integrity providers.

Dreamster’s Privacy Policy does not govern the independent privacy practices of those third parties. Their processing may be governed by their own privacy notices, contracts, terms, data-retention rules, and legal obligations. Users should review the applicable provider’s privacy policy before providing information directly to that provider.

24. GOOGLE AND APPLE SIGN-IN

If you choose to sign in through Google, Apple, or another authentication provider, that provider may process information concerning your authentication request.

Dreamster receives only information made available to us in accordance with the permissions associated with the login process. Your relationship with the authentication provider is also governed by that provider’s privacy terms.

25. EMAIL AND COMMUNICATIONS

Dreamster may use your email address or other permitted contact information to send:

Account notices;
Security alerts;
KYC or compliance notices;
Transaction notifications;
Bank-payout or off-ramp notices;
Artist-upload, screening, rights, or music-related notifications;
Changes to our Terms or policies;
Customer-support communications; and
Marketing communications where permitted.

Where required, marketing emails will include a method to unsubscribe. Unsubscribing from marketing messages will not prevent Dreamster from sending necessary account, security, transaction, compliance, rights, or legal communications.

26. PUBLIC INFORMATION

Certain information you choose to make available through Dreamster may be public.

This may include:

Artist profiles;
Artist names;
Music releases;
Artwork;
Music metadata;
Public wallet addresses;
Public blockchain transactions;
DMA information;
DSTER balances, rewards, or transfers where recorded on a public blockchain;
Supported stablecoin transactions or wallet activity where recorded on a public blockchain;
Public Perks;
Public comments or community activity where supported; and
Other information intentionally made public.

KYC documents, bank-account details, private payment credentials, internal sanctions/compliance screening, and proprietary AI-detection results are not intended to be public Platform profile information.

Users should not submit confidential or highly sensitive personal information to public portions of Dreamster.

27. ARTIST RESPONSIBILITY FOR THIRD-PARTY INFORMATION

Artists, labels, distributors, and other Uploaders may submit information relating to collaborators, producers, writers, rights holders, licensors, labels, publishers, featured performers, photographers, designers, or other participants.

By submitting another person’s personal information, the Uploader represents that the Uploader has lawful authority to provide that information to Dreamster for the applicable upload, rights-management, payment-split, verification, compliance, or dispute-resolution purpose.

Dreamster may contact an Uploader regarding privacy requests, rights claims, ownership disputes, payout disputes, AI/content-integrity review, or other matters involving information the Uploader submitted.

28. CHANGES TO THIS PRIVACY POLICY

Dreamster may update this Privacy Policy as the Platform, laws, technology, service providers, security practices, KYC/payment integrations, payment-stablecoin requirements, DSTER reward or utility features, artist-upload processes, or business practices change.

The updated policy will identify the date of the most recent revision. If changes materially affect how personal information is processed, Dreamster may provide additional notice or request consent where required by applicable law.

Continued use of Dreamster after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy to the extent permitted by law.

29. CONTACT US

Questions, privacy requests, or concerns regarding this Privacy Policy may be sent to:

Dreamster DAO LLC

Cheyenne, Wyoming

United States

Email: [email protected]

For privacy-related requests, please include sufficient information for Dreamster to identify your account and understand your request. Do not send passwords, private wallet keys, seed phrases, complete payment-card numbers, or other wallet/payment secrets by email.

30. RELATIONSHIP TO DREAMSTER TERMS

This Privacy Policy should be read together with Dreamster’s:

Terms and Conditions;
Artist / Label Upload, Distribution and Rights Agreement;
Mandatory per-upload Artist / Label Rights & No-AI Certification;
Digital Music Album (DMA) Purchase Terms & Risk Disclosure;
DSTER reward and Platform-utility disclosures or notices;
Wallet, payment, payment-stablecoin, KYC, and off-ramp notices;
Content-claims and rights-management policies;
Cookie disclosures, where applicable; and
Other policies or feature-specific notices presented through the Platform.

If a Platform feature requires additional processing of personal information, Dreamster may provide a feature-specific privacy notice at the time the information is collected. This Privacy Policy addresses data practices; the legal and economic rights, restrictions, risk disclosures, and transaction terms applicable to DMAs, DSTER, supported payment stablecoins, purchases, sell-backs, transfers, and withdrawals are governed by the applicable Dreamster Terms and feature-specific agreements.

DREAMSTER PRIVACY POLICY

Effective: September 22, 2026