Privacy Policy

Data Controller

The Data Controller for personal data protection purposes is the provider of the Strimoza platform. The service is hosted on high-availability infrastructure with global coverage.

What Data We Collect

Data you provide:

• Email and password (at registration)
• Username
• Payment details — processed exclusively by Stripe, we do not store card numbers
• Video files and their metadata (title, duration, size)

Data collected automatically:

• IP address (temporarily, for security and rate limiting — not stored permanently)
• Browser type and operating system
• Usage statistics: watch time, bandwidth used
• System logs for diagnostic purposes

Purpose & Legal Basis of Processing

• Performance of a contract: Providing the service, account management, payment processing
• Legitimate interest: System security, abuse prevention, service improvement
• Legal obligation: Compliance with tax and accounting obligations
• Consent: Sending informational communications (where you have consented)

How We Use the Data

• Creating and managing your account
• Storing and streaming your videos via Bunny CDN
• Calculating storage and bandwidth usage
• Processing payments via Stripe
• Sending necessary notifications (account security, service changes)
• Improving and diagnosing platform issues
• Complying with legal obligations

Sharing with Third Parties

We do not sell, rent or trade your data. We share data only with:

• Bunny CDN — video storage and delivery
• Stripe — payment processing
• Brevo — transactional email sending (verification, password reset)

In any case of mandatory disclosure by an authority or court, we will notify you where legally permitted.

Storage & Security

We apply technical and organizational measures to protect your data:

• Password encryption with bcrypt
• HTTPS/TLS for all communications
• Signed URLs for secure video access with limited validity
• Rate limiting to prevent abuse
• CSRF protection on all forms
• Automatic daily database backups

In the event of a data breach, we will notify the competent authorities and affected users without undue delay.

Retention Period

• Account data: Retained for as long as the account is active
• Videos — manual deletion: Deleted immediately and permanently when the user or administrator deletes them
• Videos — plan downgrade: If the Free limit is exceeded, deleted automatically after a grace period of 30 days
• Payment history: Retained for as long as the account is active. Full payment details are managed exclusively by Stripe.
• Database backups: Retained in secure storage (daily, weekly, monthly)

Your Rights

You have the following rights regarding your personal data:

• Access: To receive a copy of your data
• Deletion: To request deletion of your data
• Restriction: To restrict processing under certain conditions
• Portability: To download all your data (usage statistics, video metadata) in a structured format directly from your account settings.
• Data export: You can download your payment history in CSV or PDF from your account settings.
• Objection: To object to processing based on legitimate interest
• Withdrawal of consent: At any time, without retroactive effect

To exercise any right, see the GDPR Rights → page.

Contact

For any matter regarding the Privacy Policy or your data: