Privacy Policy

Last updated: October 2026

This Privacy Policy explains how personal data is processed on story.iamgreat.com ("I AM GREAT STORY"). It covers this website only. The I AM GREAT mobile app has its own privacy policy.

1. Who is responsible

BLUELIGHT DIGITAL TECH SRL, Tax ID (CUI) 47425350, Trade Register No. J2023000133233, Str. Campul Pipera 127 Et. 4 Ap. 32, Voluntari, Ilfov, Romania, is the controller of your personal data. Contact: support@iamgreat.com.

2. What data we process and why

• Account: your email address, the date you created the account, and your chosen site and subtitle languages (set first from your browser's language). Purpose: to create and run your account and to sign you in. Legal basis: performance of the contract.
• Profile (optional): a display name and a profile photo, if you add them on your account page. They are shown only to you, are not public and are not used for anything else; the photo is stored privately, without its original file data (such as location or camera details). You can change or remove them at any time, and they are deleted with your account. Legal basis: your choice to add them (consent).
• Purchases: the episodes you bought, the amount, currency, VAT, date and order status, and the identifiers of the payment at Stripe. Purpose: to sell episodes, unlock them in your account and keep accounting records. Legal basis: performance of the contract and our legal obligations.
• Checkout consent: the moment you confirmed immediate access and the loss of the right of withdrawal, and the version of that text. Purpose: to prove your consent. Legal basis: legal obligation and our legitimate interest.
• Watchlist: the episodes you saved. Purpose: to show your list. Legal basis: performance of the contract.
• Playback: which episode you watch and when, your approximate country and the type of device. Purpose: to limit simultaneous playback per account and to detect misuse of accounts. Legal basis: our legitimate interest in protecting the episodes.
• Video watermark: your email address is shown on the video while you watch, to discourage illegal copying. Legal basis: our legitimate interest.
• Website statistics: for every visit we record the pages you see, how long and how far you read them, where you came from (the referring website or campaign), your approximate country, region and city, your browser's language, the type of device, operating system and browser, and your shortened IP address (the last part is never stored, for example 203.0.113.x). We never store your full IP address. Two of our own cookies recognise your visit and your device across pages and visits. Purpose: to understand how the website is used, to improve it and to protect it against abuse. Legal basis: our legitimate interest. See the Cookie Notice.
• Analytics by Google (only if you accept): if you accept analytics cookies, Google Analytics also measures how the website is used.

We do not sell your personal data and we do not use it for advertising.

3. Who receives your data

We use service providers that process data on our behalf, under contract:

• Our database and sign-in provider (servers in the European Union, Frankfurt).
• Stripe: payments.
• VdoCipher: video hosting and protected playback.
• Vercel: website hosting.
• Our email delivery provider: sign-in emails.
• Google: analytics, only if you accept analytics cookies.

Some of these providers may process data outside the European Economic Area. In that case the transfer is protected by the safeguards required by law, such as the European Commission's Standard Contractual Clauses.

We may also disclose data to public authorities when the law requires it.

4. How long we keep data

• Account data: while your account exists. When you delete your account, we delete your account data, except what we must keep by law.
• Purchase and accounting records: for the period required by Romanian accounting and tax law.
• Checkout consents: as long as we may need to prove them.
• Playback records: only as long as needed for the purposes above.
• Shortened IP addresses of visits and security records: 90 days, then deleted. Website statistics without the IP address (counts of visits, pages, countries, devices) are kept to compare periods.

5. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To use these rights, write to support@iamgreat.com.

You also have the right to complain to the Romanian data protection authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro.

6. Age

The website is for people aged 18 and over. We do not knowingly process data of children.

7. Security

Access to your data is restricted: each user can see only their own account data, and payment card details are handled only by Stripe. No method of transmission or storage is completely secure, but we work to protect your data.

8. Changes

We may update this policy. The date of the latest update is shown at the top of this page.