Privacy & Cookie Notice

I'm Right (imright.co.uk) is a novelty service that settles arguments with an AI-generated verdict. The data controller is [CONTROLLER NAME — to be supplied], based in the United Kingdom. You can reach us about anything on this page at privacy@imright.co.uk, or by post at [POSTAL ADDRESS — to be supplied].

• You don't need an account and we don't ask who you are.
• We do not use advertising, behavioural tracking or analytics cookies of any kind.
• The argument text you type is sent to an AI model to produce a verdict and is not stored in our database afterwards.
• We do store the dispute topic, the two names you typed and the verdict, so your verdict link keeps working.
• Nothing appears publicly unless you submit your case to Recent Cases and we approve it.
• Please use first names or nicknames only, and don't include surnames, contact details or sensitive personal information about yourself or anyone else.

When you submit an argument, your browser sends us: the dispute topic, a name for each side, and each side's argument text. As with any website, our infrastructure also sees technical information such as your IP address, browser user-agent and the time of the request.

To produce a verdict, we send the dispute topic, the two names and both arguments to a large language model through the Lovable AI Gateway, which currently routes to Google's Gemini models. We do not send your IP address, and we do not store the argument text once the verdict has been produced. Verdicts are generated automatically; there is no human review of your submission unless you submit your case for publication or someone reports it.

Verdicts are entertainment. They are automatically generated, can be wrong, and have no legal effect. This is not automated decision-making that produces legal effects for you.

Every verdict gets a long, randomly generated link (14 characters). That link is unguessable, but anyone you share it with can open it, so treat it as public. Verdict pages are excluded from search engines unless the case has been approved for Recent Cases.

Your argument text is never shown publicly. If you submit your case to Recent Cases and we approve it, the dispute topic, the two names, the winner, the verdict headline, the confidence score and the date become publicly visible and indexable.

• Lovable — hosting, deployment and platform-level visitor analytics, plus error reporting.
• Supabase — the database that stores verdicts, hashed rate-limit records and aggregate event counts.
• Cloudflare — content delivery and edge security in front of the site.
• Lovable AI Gateway and Google (Gemini) — AI inference to produce the verdict.

These providers act as our processors or sub-processors and see only what they need to run the service. Some of them process data outside the UK, including in the United States, in which case the transfer relies on the safeguards in those providers' own data processing terms. [OWNER TO CONFIRM: the specific transfer mechanism named in each provider's DPA before publication.]

This site sets no advertising cookies, no behavioural tracking cookies and no analytics cookies. Nothing is written to your browser's local storage or session storage. Because every cookie below is strictly necessary, we do not ask for cookie consent.

Fonts and images are served from this site, so simply loading a page does not send your IP address to any third-party font or advertising network. If you click a sharing button (WhatsApp, X, Facebook or your device's share sheet), you leave our site and that service's own privacy policy and cookies apply.

• Argument text — not stored at all after the verdict is produced.
• Summonses (“Summon the other side”) — if you send someone a private challenge link, we temporarily store the dispute topic, your first name or nickname and your argument so the other side can read it and reply. We delete the stored argument as soon as the verdict is delivered, and automatically after 7 days if nobody replies. Challenge records themselves are removed after 30 days. The person you send it to only ever sees the topic and your first name or nickname — never your argument text — until they file their own defence. We never ask for, see or store their phone number, email address or any other contact detail: you send the link yourself.
• Verdicts (topic, names, verdict) — kept indefinitely so links keep working, unless you ask us to delete one.
• Hashed rate-limit records — automatically deleted after 48 hours (and within 90 seconds for the in-progress marker).
• AI usage timestamps — 45 days.
• Aggregate event counts — kept indefinitely; they contain no identifiers.
• Content reports — deleted along with the case, or once resolved and no longer needed.
• Hosting and edge logs — retained by Lovable and Cloudflare under their own retention periods.

Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our use of it based on legitimate interests. You can also withdraw consent to publication at any time.

How to ask us to delete a verdict: email privacy@imright.co.uk with the verdict link (or its 14-character ID). Because we hold no account details, the link is the only way we can find your case. You can also use the “Report this case” option on any public case page. We will respond within one month.

If a verdict names you and you did not submit it, tell us the link and why, and we will remove or unpublish it.

If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk, or call their helpline on 0303 123 1113. We'd rather you gave us a chance to put it right first.

This service is not intended for children under 13. Please don't use it if you are under 13. We do not knowingly collect data from children, and because there are no accounts we hold no age information. If you believe a child has submitted personal information, email us and we will delete it.

The site is served over HTTPS with strict transport security. IP addresses used for rate limiting are stored only as a keyed one-way hash, never in the clear. The private admin area is password-protected, rate-limited against repeated login attempts and excluded from search engines.

If we change how we handle data — for example by adding analytics or a bot-check service — we will update this notice and change the date at the top.