Privacy Policy
Last updated: 2026-07-13
What we collect
- Account: email, hashed password, display name.
- Content you create: notes, files, projects. We do not use this content to train AI models or sell advertising.
- Usage: privacy-respecting analytics via Cloudflare Web Analytics (no cookies, no fingerprinting).
What we don't do
- We do not sell your data.
- We do not train AI models on your content.
- We do not embed third-party advertising trackers.
Your rights (GDPR / CCPA)
You can export, correct, or delete your data at any time from your account settings. Email [email protected] for assistance.
Cookies & local storage
Glassy keeps you signed in with a session token stored in your browser's localStorage (key glassy-dash-token), sent to the server only as an Authorization header on API requests. There is no server-side session cookie.
The only cookie Glassy sets is glassy_authed=1 — a first-party presence flag (functional, no credential, no personal data) that lets our marketing pages show a signed-in "Open Glassy" button. This site measures traffic with Cloudflare Web Analytics, which is cookieless and does not fingerprint. If we ever introduce marketing trackers or other non-essential storage on any Glassy surface, a consent banner ships in the same change — never after.
Contact
Glassy Inc. · [email protected]