Last updated: October 2026
This page describes how Sentria handles information. It covers the Sentria hub — the website you are currently on — including the Lab membership purchase flow, and the shared back-end service (Sentria Services) that the hub and some Sentria applications use for Lab membership and credits. It does not cover the individual applications in the Sentria ecosystem (Somnia, Orbis, Oneiro, Limina, and others) in full technical detail, as each is a separate tool; where relevant, this page notes how those tools generally relate to your data, and each application may publish its own, more specific privacy information.
Who is responsible
Sentria is an independent, personally maintained project. There is no company or team behind it — just one person building a set of tools for exploring dreams and consciousness. The person responsible for your data, and the seller of Lab memberships and credits, is: Sašo Drobnič, Ljubljana, Slovenia. Questions about this policy or your data can be sent through the contact page or to saso.drobnic@gmail.com.
What information is collected
The Sentria hub itself is a static website. It does not require an account, and it does not use analytics or advertising trackers. Information is collected only when you choose to provide it or use a feature that needs it, as described below.
Newsletter signup. If you submit your email address through the "Stay connected" form, that email is stored so occasional updates about the ecosystem can be sent to you. No other information is collected through this form beyond what you type in.
Contact form. If you submit the contact form, the name, email address, and message you provide are received in order to respond to you.
Both forms are processed through Formspree, a third-party form processing service. Formspree receives and stores these submissions on Sentria's behalf; their own privacy policy governs how they handle that data on their infrastructure.
Lab membership purchases. When you buy a Lab membership, you are sent to a checkout page run by Stripe, which collects your payment details and email address and processes the payment. Sentria never sees or stores your card number. Stripe shares with Sentria the information needed to complete the order and to handle receipts, refunds and support; Sentria's own database does not store your name or email address.
Sentria's own records for a membership consist of: a one-way hash of your Lab key (the key itself is not stored — which is also why it cannot be shown to you again if you lose it), the type of membership and any badge or member number that comes with it, whether it is a one-time or subscription membership, its expiry date, and — for subscriptions — the Stripe subscription identifier. Right after payment, your Lab key is held on the server for up to 15 minutes so it can be handed to the page you are on; it is deleted as soon as the page confirms it has been received.
Credits and app accounts. Some Sentria applications use credits for AI features. These work through an anonymous account: your device derives an account identifier from a master phrase, and only that identifier — never the phrase itself — is sent to Sentria Services. For each account Sentria stores the identifier, the application it was created for, the credit balance, and when it was created and last used. A usage log records, for each operation, the account identifier, application, type of operation, credits used, AI provider and model, number of tokens, and time; it keeps only the most recent entries. The content of your requests and the AI responses is not stored by Sentria. Credit purchases are processed by Stripe in the same way as Lab memberships.
AI requests. When you use an AI feature that runs through Sentria Services, the content you submit is passed on to an AI provider (currently OpenAI, Anthropic and/or Voyage AI, depending on the application) to generate the response. This happens only when you actively make a request. How the provider handles that content is governed by the provider's own privacy policy.
Technical data. To protect the service against abuse, Sentria Services temporarily keeps your IP address in short-lived counters that limit how often requests can be made. These counters expire automatically, after between one minute and 24 hours depending on the feature. Our hosting providers may also log requests, including IP addresses, as part of operating their infrastructure.
Local storage, not tracking
This site uses your browser's local storage to remember your chosen visual theme (light or dark) and language. If you hold a Lab membership, it also stores your Lab key — and a reference to the purchase it came from — so the site can recognize your membership without asking you to paste the key every time. This data stays in your browser. Your Lab key is sent to Sentria Services only when the site checks or unlocks your membership; nothing in local storage is used to identify or track you across sites. You can clear it at any time through your browser settings; if you do, keep a copy of your Lab key first.
At the time of writing, the Sentria hub does not use analytics, advertising scripts, or tracking cookies.
Services we rely on
Running Sentria involves a small number of third-party providers, each of which processes data on Sentria's behalf or as an independent service: Vercel (hosting of the website and of Sentria Services), Upstash (database for Sentria Services, hosted in Frankfurt, Germany), Stripe (payments), Formspree (contact and newsletter forms), the AI providers named above (only for AI features you use), and Google Fonts. Fonts are loaded from Google's servers, which means Google receives your IP address when a page loads.
Some of these providers are based in the United States or process data there. Where personal data of people in the European Union or European Economic Area is transferred outside the EEA, Sentria relies on a transfer mechanism recognised by the GDPR: either the European Commission's adequacy decision for the EU–US Data Privacy Framework, for providers certified under it (for example Vercel and Stripe), or the standard contractual clauses contained in the provider's data processing terms. The database of Sentria Services is located in the EU (Frankfurt, Germany).
Why information is processed
Purchases, memberships and credits are processed to fulfill the contract with you. The newsletter is sent only if you signed up for it, and you can withdraw at any time. Short-lived technical data such as IP-based counters is processed for the legitimate purpose of keeping the service secure and available.
The individual applications
Sentria's ecosystem is built around local-first principles wherever practical. Applications like Somnia and Orbis are designed so that the dream entries, notes, and personal data you create within them are stored on your own device or browser by default, not on a central Sentria server. Some tools — such as those offering AI-assisted reflection — may send specific content you choose to submit to a third-party AI provider in order to generate a response; this happens only when you actively request it.
Because each application is a separate project with its own architecture, this policy cannot make precise technical claims on their behalf. As the ecosystem grows, individual applications may publish their own, more detailed privacy notes.
Your rights
If you are located in the European Union or European Economic Area, data protection law (GDPR) gives you the right to:
access the personal data held about you; request correction of inaccurate data; request deletion of your data; restrict or object to certain processing; and receive a copy of your data in a portable format.
To exercise any of these rights — for example, to have your email address removed from the newsletter list, or to have a credits account deleted — reach out via the contact page. Because Sentria stores only a hash of your Lab key and an account identifier derived on your device, we may ask you to supply your Lab key or account identifier to find the right records. Payment records held by Stripe, and records we are legally required to keep (such as accounting records), cannot always be deleted on request. You also have the right to lodge a complaint with your local data protection authority; in Slovenia, this is the Information Commissioner (Informacijski pooblaščenec).
Data retention
Newsletter and contact submissions are kept for as long as they remain useful to the purpose they were collected for — generally, until you ask for them to be removed, or until they are no longer relevant. Lab membership records are kept for as long as the membership exists and, after it ends, until you ask for them to be deleted; they contain no name or email address. Credits accounts are kept until deletion is requested; the usage log keeps only the most recent entries. Payment and invoice records are kept by Stripe and by us for as long as accounting and tax law require — in Slovenia, generally ten years from the end of the year in which the transaction took place. IP-based counters expire automatically within 24 hours, a Lab key waiting to be collected is deleted within 15 minutes, and unredeemed credit transfer codes expire within 24 hours.
Changes to this policy
As Sentria grows and new tools are added, this policy may be updated to reflect new functionality. Meaningful changes will be reflected in the "last updated" date above.
A note on this document
This policy is written in plain language and in good faith, to be genuinely useful rather than purely defensive. It is not a substitute for legal advice, and if you have specific legal concerns, you should consult a qualified professional.