Privacy Policy
What we collect, why we collect it, and how we treat your information.
Last update May 20, 2026
[01]·Who we are
GlassKit(“we”, “us”, “our”) operates the website at glasskit.app and the private GitHub repository delivered to paying customers. This policy explains how we handle personal information.
If you have questions, email @JarJarMadeIt on X.
[02]·Information we collect
We collect three categories of information:
- Information you give us directly: when you email support, submit a contact form, or (after purchase) join our customer Discord, we store the contents of that interaction along with your email address.
- Information collected by our payment processor: when you purchase GlassKit, our third-party payment processor (category: merchant of record / payment-processing service) collects your name, email, billing address, and payment details. The processor is the merchant of record and acts as a separate data controller for billing information. We receive a copy of your name and email, but never your full payment information. The processor's identity and current privacy policy are shown on the checkout page itself (linked at the moment you initiate purchase); you can also request its name and privacy-policy URL at any time by contacting us via the channel in Section 06.
- Usage data: when you visit
glasskit.app, our analytics provider (Vercel Analytics) records aggregate, anonymized usage data: pages visited, referrer, browser type, country. We do not use third-party advertising cookies or fingerprinting.
[03]·How we use information
We use the information we collect to:
- Fulfill your order and grant GitHub repository access
- Respond to support requests
- Send transactional emails (receipts, license confirmations, repository invitations)
- Send occasional product updates (only with your explicit opt-in; you can unsubscribe at any time from any of these emails)
- Improve the product based on aggregate usage patterns
We do not sell, rent, or trade your personal information to third parties.
[04]·Where your data lives
The systems that store your information:
- Our third-party payment processor: purchase records, billing details, license entitlements
- GitHub (Microsoft): repository access lists, issue conversations
- Vercel (hosting): aggregate analytics, server logs (retained for 30 days)
- Resend (transactional email): email delivery logs
- Discord(customer community platform, available only after purchase, when you accept the role-grant invite from our payment processor): messages and account info per Discord's terms
[05]·Cookies
We use a small number of strictly necessary cookies for authentication and session management. We do not use third-party advertising or tracking cookies. Vercel Analytics uses a single anonymous identifier that is reset every 24 hours and is not tied to your personal information.
[06]·Your rights
If you are located in the European Economic Area, the United Kingdom, California, or another jurisdiction with comprehensive privacy laws, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your information (right to be forgotten)
- Export your information in a portable format
- Object to or restrict certain processing
- Withdraw consent to optional processing at any time
To exercise any of these rights, email @JarJarMadeIt on X. We respond within 30 days.
[07]·Children
GlassKit is a developer tool not intended for use by children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
[08]·Data retention
We retain customer purchase records for the duration of your license (which is perpetual) plus seven years for tax and accounting purposes. Support email threads are retained for two years. Server logs are retained for 30 days.
[09]·Security
We use industry-standard security practices: HTTPS everywhere, encrypted secrets in our infrastructure provider (Vercel), and we never store payment card data on our servers. Our third-party payment processor handles all payment information using PCI-compliant systems.
[10]·Changes to this policy
We may update this policy from time to time. Material changes will be communicated to active customers via email at least 14 days before they take effect. The “Last update” date at the top of this page reflects the most recent revision.
[11]·Contact
For questions, complaints, or to exercise your rights under this policy, email @JarJarMadeIt on X.