Privacy policy

Who we are

Glint (glint.so, app.glint.so and the Glint iPhone app) is run by Zukunft d.o.o., a limited liability company registered in Croatia, which is the controller of your personal data. You can reach us about anything in this policy at [email protected]. Using Glint is also covered by our terms.

Where your data lives

Glint runs on our own servers at Hetzner in Falkenstein, Germany: the database with your account and rooms, live voice and video, and our technical logs. Uploaded files and stored logs are kept in Cloudflare's EU storage. Cloudflare sits in front of Glint to keep it fast and protected from attacks.

What we collect and why

We store friend connections and direct messages so you can stay in touch across rooms; direct messages are visible only to the people in the conversation and to moderators when reported. We also store event RSVPs and send event reminder emails, which you can turn off in settings or from any reminder.

When you sign up, we keep the campaign link you arrived from, such as a newsletter or Product Hunt, with your account to see which places bring people to Glint.

What	Why	Legal basis
Your account: email address, name, password (stored hashed), profile photo or avatar, and your settings. If you sign in with Google or Apple, the name, email and account ID they share with us (with Apple, the email can be a private relay address).	To give you an account and sign you in	Contract
How you use Glint: which rooms you're in, the days you open a room, when you were last active, and gifts you send or claim. If you join without an account, a temporary guest ID.	To show who's in a room, to run gifts, and to count how many people come back to Glint. That count stays in our own database, and we only look at it as totals.	Contract, legitimate interest
What you put in rooms: rooms you build, stickers, notes, chat messages, links, images and files you upload	To show them to you and the people in your rooms. Uploaded files are stored at hard-to-guess links, so anyone who has a file's link can open it.	Contract
Voice, video and screen sharing	Sent live to the people in the room through our own servers. We don't record it.	Contract
On the iPhone app: camera, microphone and photos, only when you use them, and a device token if you allow notifications	To talk and video call, add photos to rooms and your profile, and send you notifications. Photos are only uploaded when you pick them.	Contract, consent (your iPhone asks first)
While the iPhone app is a TestFlight beta: crash reports, device and usage details, and any feedback you send, which Apple shares with us	To find and fix problems in the beta	Legitimate interest
Sticker packs you buy and your orders	To put what you bought in your album, and for our accounts	Contract, legal obligation
Technical logs: IP address, browser, requests and errors	To keep Glint running, secure and free of abuse	Legitimate interest
Emails about your account (verification, password reset) and occasional update emails, with whether a link in them was clicked	To run your account, and to tell you what's new in Glint. Every update email has an unsubscribe link. Glint may also email you a reminder about your rooms after signup, when someone visits your room, when a friend messages you or when someone sends you a friend request. Every room or social email has a link to stop that type of email.	Contract, legitimate interest

Cookies and storage

Glint doesn't use Google Analytics, session recordings or advertising cookies. On the web, it keeps you signed in with one essential cookie that only Glint's servers can read. It also keeps a few things in your browser's local storage that it needs to work: your guest session if you join without an account, your settings (such as reduced effects and player volume) and designs you've saved. None of these are used to track you. The fonts on glint.so and in the app are served by us, not by Google.

Who helps us run Glint

We share data only with the services that help us run Glint, and only what each one needs:

Hetzner (Germany): the servers Glint runs on
Cloudflare: network, security and storage for files and logs (kept in the EU), and cookieless visit counts (Cloudflare Web Analytics, which doesn't identify you or set cookies)
Google: Google sign-in
Apple: Sign in with Apple, notifications, the TestFlight beta of the iPhone app, and sticker packs bought in the iPhone app (Apple takes the payment; we receive what was bought and Apple's transaction ID, never payment details). If you allow notifications in the iPhone app, a message preview, the sender's name and your device token go through Apple's push notification service.
Resend: sending our emails, through Amazon Web Services in the United States
Tally: our feedback form, which only loads when you open it and receives what you send
Polar: sells sticker packs as merchant of record and handles payment details, which we never see
Twenty Interactive (Croatia): holds Glint's account with Polar for us, and sees orders (name, email and what was bought)
Klipy and Unsplash: GIF and photo search (they receive what you search for)

When a room shows something from another service, your browser loads it from there, so that service sees your IP address and browser. That includes YouTube videos (in its privacy-enhanced mode), Spotify, SoundCloud, Vimeo, Twitch and TikTok players, GIFs from Klipy and Tenor, photos from Unsplash, previews of documents from Microsoft and Google, the video player's icons and video titles (from Plyr and Noembed), and any other link someone adds. Some of them can set their own cookies once you play something.

Some of these services are based outside the EU. Where data leaves the EU, it's covered by the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses, and you can email us for a copy of the safeguards. We don't sell your data.

How long we keep it

Your account, owned spaces and rooms: until you delete your account or ask us to
Things removed from a room go to its trash first, where they can be restored. They're erased when the room is deleted, or sooner if you ask us.
Orders: as long as accounting law requires (in Croatia, generally 11 years)
Technical logs: up to 120 days
The days you opened a room: until you delete your account, or the room is deleted

Your rights

You can ask to see the data we have about you, correct it, delete it, get a copy to take elsewhere, restrict or object to how we use it, and withdraw any consent you gave. Email [email protected] from the address on your account and we'll answer within a month. If you ask, we'll also tell you exactly which services received your data.

You can delete your account in Account Settings, or email us. That removes your account, the spaces and rooms you own, the files you uploaded (including ones in other people's rooms), and your album, saved sticker sets and gifts. Messages and objects you added to other people's rooms stay there under "Deleted user"; if something you wrote there still identifies you, tell us and we'll remove it. We keep order records, without your Glint account, for accounting, and Polar keeps its own billing records.

If you think we've got something wrong, you can complain to the Croatian data protection authority (AZOP) or the authority where you live.

Children

Glint isn't meant for children under 16, and we don't knowingly collect their data.

Changes

When this policy changes, we'll update the date at the top. If it's a big change, we'll let you know in the app or by email.

Contact

Zukunft d.o.o.
Zukunft društvo s ograničenom odgovornošću za informatičke usluge
Grožnjanska ulica 32, 10000 Zagreb, Croatia
Registered at the Commercial Court in Zagreb (Trgovački sud u Zagrebu), MBS 081322207
OIB 62560895839
Share capital HRK 20,000.00 (EUR 2,654.46), paid in full
Directors: Domagoj Franc, Mario Janković
Bank: Privredna banka Zagreb d.d., Zagreb, IBAN HR09 2340 0091 1110 8482 1
[email protected]