Privacy Policy

GlassKit(“we”, “us”, “our”) operates the website at glasskit.app and the private GitHub repository delivered to paying customers. This policy explains how we handle personal information.

If you have questions, email support@glasskit.app.

We collect three categories of information:

• Information you give us directly — when you email support, submit a contact form, or join our Discord, we store the contents of that interaction along with your email address.
• Information collected by our payment processor (Polar) — when you purchase GlassKit, Polar collects your name, email, billing address, and payment details. Polar is the merchant of record. We receive a copy of your name and email, but never your full payment information. See Polar's privacy policy.
• Usage data — when you visit glasskit.app, our analytics provider (Vercel Analytics) records aggregate, anonymized usage data: pages visited, referrer, browser type, country. We do not use third-party advertising cookies or fingerprinting.

We use the information we collect to:

• Fulfill your order and grant GitHub repository access
• Respond to support requests
• Send transactional emails (receipts, license confirmations, repository invitations)
• Send occasional product updates (only with your explicit opt-in; you can unsubscribe at any time from any of these emails)
• Improve the product based on aggregate usage patterns

We do not sell, rent, or trade your personal information to third parties.

The systems that store your information:

• Polar (payment processor) — purchase records, billing details, license entitlements
• GitHub (Microsoft) — repository access lists, issue conversations
• Vercel (hosting) — aggregate analytics, server logs (retained for 30 days)
• Resend (transactional email) — email delivery logs
• Discord(community platform, if you join) — messages and account info per Discord's terms

We use a small number of strictly necessary cookies for authentication and session management. We do not use third-party advertising or tracking cookies. Vercel Analytics uses a single anonymous identifier that is reset every 24 hours and is not tied to your personal information.

If you are located in the European Economic Area, the United Kingdom, California, or another jurisdiction with comprehensive privacy laws, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your information (right to be forgotten)
• Export your information in a portable format
• Object to or restrict certain processing
• Withdraw consent to optional processing at any time

To exercise any of these rights, email support@glasskit.app. We respond within 30 days.

GlassKit is a developer tool not intended for use by children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We retain customer purchase records for the duration of your license (which is perpetual) plus seven years for tax and accounting purposes. Support email threads are retained for two years. Server logs are retained for 30 days.

We use industry-standard security practices: HTTPS everywhere, encrypted secrets in our infrastructure provider (Vercel), and we never store payment card data on our servers. Polar handles all payment information using PCI-compliant systems.

We may update this policy from time to time. Material changes will be communicated to active customers via email at least 14 days before they take effect. The “Last update” date at the top of this page reflects the most recent revision.

For questions, complaints, or to exercise your rights under this policy, email support@glasskit.app.