Legal

Privacy Policy

This policy explains what personal data boldbrio.engyes.com (“BoldBrio”, “we”) collects and why. We follow the EU General Data Protection Regulation (GDPR) and Brazil’s LGPD.

Who is responsible

[Owner: add the legal name and postal address of the controller and a contact email for privacy requests.]

What we collect

  • Email sign-ups (newsletter, daily dare, 30-Day Challenge, free downloads): your email, language and where you signed up. Legal basis: your consent. Stored in our database and in our email provider MailerLite (MailerLite UAB, EU).
  • Member accounts: email, optional first name, a securely hashed password, your challenge progress. Legal basis: contract (providing the account).
  • Comments, story submissions and contact messages: the name, email and text you send. Stored in our content system for moderation; your email is never published.
  • “I did it” counts: counted with an anonymous daily hash, no cookie and no stored IP address.
  • Purchases: processed by Stripe; we receive order details but never your full card number.
  • Analytics and ads (only with your consent): privacy-friendly analytics (Plausible or Umami), Google Analytics and Google AdSense may use cookies or similar technologies. See the Cookie policy.
  • Videos: embedded YouTube videos load from youtube-nocookie.com only after you press play.

How long we keep it

Sign-ups until you unsubscribe; accounts until you delete them (you can do it yourself in the Member area); messages up to 24 months.

Your rights

You can request access, correction, deletion, restriction, portability, and withdraw consent at any time. You may also complain to your data protection authority (in Brazil, the ANPD).

Template prepared for the launch on 7 November 2026. Review with a legal professional before relying on it.