Last updated: 2 November 2026
This page explains what data we collect on lightarmenia.com, why, how long we keep it and what rights you have. We collect as little as possible. We do not sell data and we do not use advertising trackers.
Who is responsible for your data
The data controller is [Company legal name] (TIN [Tax ID]), [Registered address]. For any privacy question, write to hello@lightarmenia.com.
We process personal data in line with the Law of the Republic of Armenia on Protection of Personal Data and, for visitors from the European Union, the General Data Protection Regulation (GDPR).
What we collect
| Data | Why | Required? |
|---|---|---|
| Your wish text (up to 120 characters) | To burn it in the fire and, if you allowed it and it passed moderation, show it publicly | Only if you write a wish |
| Your place: where it is on the map, how it looks and your room | To show your place and room on the map to visitors | Yes |
| Your name or nickname (up to 30 characters) and a few words (up to 60 characters) on your place | To show them publicly with your place (after they pass moderation) | Yes |
| Email address | To send you the link to your page and receipt, a payment link for a saved place, and the launch notification if you asked for it | Yes |
| Language you chose | To show pages and emails in your language | Yes |
| Order and payment status | To deliver the service, handle refunds and keep accounting records | Yes |
| A salted hash of your IP address | To protect the service from abuse (for example, limiting how many orders can be made in a short time) | Yes |
What we do not collect:
- Card data. You enter your card details only on the bank's own secure payment page. We never see or store your full card number or CVV. The bank sends us a payment confirmation, which may include technical details such as a masked card number (for example, only the last four digits).
- Your raw IP address. We store only a one-way salted hash of it, which cannot be turned back into the address.
- Account or password. There is no registration. Your order code (the link to your personal page) is your key.
Your personal page link
Your personal page has a long random address that cannot be guessed. Anyone who has this link can see your place, your room and your wish. Keep the link private unless you want to share it.
Places on the map
Your place on the map is public: any visitor can tap it, open your room and see your name and words (once they are approved), the date the place was taken, the province and the nearest town. Your name and words are public by your choice, so don't put anything in them you wouldn't want others to see, and don't include other people's private data. Your email is never shown.
A place is an illustrative cell of the map; it does not stand for your or anyone's real address.
Blogger applications
If you are a blogger and register through the form on the 20% for gifts page to take part in delivering the gifts on 25–30 December (to come along, film and tell your audience about it), we receive:
- your name;
- the link to your profile and the platform (for example Instagram, TikTok or YouTube);
- the size of your audience;
- your email address;
- optionally, your phone number and a message;
- the language you chose.
Why: only to contact you about the gift delivery and agree on your participation. We do not use this data for advertising or newsletters.
Not public: your application is not shown on the website. Only our team sees it, and we do not share it with anyone except the technical providers listed below.
How long: we delete the application within 6 months after the campaign ends, unless we work together. If we do, we keep it for as long as that collaboration needs. You can ask us to delete it sooner at any time.
Why we may use your data (legal bases)
- To provide the service you ordered (place, room, wish, page, email with the link).
- To meet legal obligations, such as accounting and tax records of payments.
- Our legitimate interest in keeping the service safe from abuse and spam (IP hash, moderation).
- Your consent, for the launch notification and for handling a blogger application. You can withdraw it at any time.
Who else processes the data
We use a small number of trusted service providers, only to run the service:
- Supabase — database and server functions. Data is stored in the European Union (Frankfurt, Germany).
- Vercel — website hosting and delivery. Like any web server, it may process technical data such as your IP address in its logs.
- Ameriabank — processes your card payment under its own rules and privacy policy.
- An email delivery service — only to send the emails described above.
- YouTube (Google) — hosts the live stream. If you watch the stream on YouTube or in a player embedded on our site, YouTube's own privacy policy applies and YouTube may use its own cookies.
Some of these providers may process data outside Armenia and the EU. In such cases we rely on the protections offered by these providers, such as standard contractual clauses.
We never sell or rent your data and never share it for advertising.
How long we keep data
- Order and payment records: as long as Armenian accounting and tax law requires.
- Wish texts: you can ask us to delete your text at any time. We will delete it, but keep the record of the payment itself (amount, date, status) as the law requires.
- Place data (where it is on the map, how it looks, your room, name, words, email and language): kept under the same rules as other orders. You can ask us to delete your place's name or words at any time; we will delete it, but keep the record of the payment itself as the law requires.
- Blogger applications: deleted within 6 months after the campaign ends, unless we work together.
- Email addresses: kept while needed for the purposes above. An email given only for the launch notification is deleted after the 2026 season ends, or earlier if you ask.
- IP hashes: kept only as long as needed for abuse protection.
Public content
If your text was approved and you allowed it, it may appear in the fire on the website, on the live stream and in its recordings. If you want it removed later, write to us: we will remove it from the website and, where technically possible, from stream recordings.
Your place's name and words, if approved, are shown on the map and on your place's page. We can remove them too if you ask.
Your rights
You have the right to:
- access your data and get a copy;
- correct inaccurate data;
- delete your data (except what the law requires us to keep);
- object to processing or withdraw consent at any time;
- for EU visitors, also restrict processing and receive your data in a portable format.
To use any of these rights, write to hello@lightarmenia.com from the email you used and include your order code. We reply within 24 hours and act within the time limits set by law.
If you think we have violated your rights, you can complain to the Personal Data Protection Agency of the Republic of Armenia or, if you are in the EU, to the data protection authority of your country.
Cookies and local storage
We use only what is strictly needed for the website to work:
- your language choice;
- your unsent draft of the wish, saved in your browser's local storage so you don't lose it.
We do not use advertising cookies or ad trackers. You can clear this data at any time in your browser settings.
Children
The service is intended for people aged 18 and over, or younger people paying with a parent's or guardian's permission. We do not knowingly collect more data from minors than is needed for the order.
Changes
We may update this policy. The date at the top always shows the latest version.
Contact
[Company legal name], [Registered address]. Email: hello@lightarmenia.com. Phone: [Phone number].