Privacy Policy

Last updated: April 9, 2026

1. Information We Collect

WatchBJJVideo collects the following information when you use our platform:

  • Registration data: full name, email address, and password (stored encrypted).
  • Usage data: pages visited, videos watched, session time, and platform interactions.
  • Technical data: IP address, browser type, operating system, and session cookies.
  • Payment data: processed by PCI-DSS certified external providers; we do not store card data.

2. How We Use Your Data

We use your information exclusively to:

  • Provide access to the platform and contracted content.
  • Process payments and manage subscriptions.
  • Send account-related communications (confirmations, live event notifications).
  • Improve the quality and relevance of displayed content.
  • Ensure platform security and prevent fraud.

3. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

  • Payment processors (e.g., Stripe, PayPal) to process transactions.
  • Hosting providers that maintain the platform infrastructure.
  • Legal authorities, when required by law or court order.

4. Cookies

We use cookies for:

  • Essential cookies: necessary for platform operation (session, authentication).
  • Analytics cookies: to understand how users interact with the platform (Google Analytics).
  • Marketing cookies: to display relevant ads on other platforms.

You can manage your cookie preferences by clicking "Cookie settings" in the page footer.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access the personal data we hold about you.
  • Correct incomplete, inaccurate, or outdated data.
  • Request deletion of unnecessary or excessive data.
  • Withdraw consent for data processing at any time.
  • Data portability to another service provider.

To exercise your rights, contact us: contato@watchbjjvideo.com

6. Data Security

We adopt technical and organizational measures to protect your data, including:

  • SSL/TLS encryption on all communications.
  • Passwords stored with bcrypt hash (cost 12).
  • Cryptographically secure session token generation.
  • Login attempt limiting to prevent brute-force attacks.

7. Data Retention

We retain your data for the period necessary to provide contracted services. After account closure, data is deleted within 90 days, unless there is a legal obligation to retain it.

8. Contact

For questions about this Privacy Policy or to exercise your rights, contact us: