Privacy policy.

The short version.

Glass Figures is a private visual journal. We use your information to let you sign in, add daily pieces, keep optional notes and photos, revisit memories, and operate the service.

This policy applies to the Glass Figures website and signed-in application (together, the “Service”). “Glass Figures,” “we,” and “us” refer to the operator of the Service.

What we keep.

We collect information you provide and a small amount needed to run the Service:

Account information

Your email address, email-verification status, optional display name, and the authentication records and session identifiers needed for passwordless sign-in. We also keep the version of the Terms you accepted and the date and time you accepted it.

Your journal

Daily colors, color names or palette identifiers, local entry dates, optional notes and descriptors, uploaded photos, and the dates those records were created or changed.

Your Figure settings

Your timezone, a random Figure seed, and an algorithm version. These keep “today” tied to your local calendar and make your Figure stable over time.

Technical information

Our hosting provider may process IP address, browser or device information, request timing, error information, and similar server logs needed to deliver, secure, and diagnose the Service.

Messages to us

If you contact us, we receive the information in your message and whatever contact details you provide.

We receive journal and account information directly from you. Technical information is produced automatically when your device communicates with the Service. We do not ask you to label a color as a fixed emotion, and we do not infer a diagnosis or mental-health profile from your choices.

Why we use it.

We use personal information only as reasonably needed to:

• create and authenticate your account and send one-time sign-in links;
• save, display, search, edit, and delete your private journal and photos;
• generate the same Figure from the same pieces and preserve each day’s identity;
• keep the daily ritual aligned with your current timezone;
• provide support, respond to requests, and communicate important service changes;
• protect the Service, prevent abuse, debug failures, and enforce our Terms; and
• meet legal obligations and establish or defend legal claims.

When information leaves us.

We disclose information only to operate the Service, follow your direction, protect people and the Service, or comply with law. Current service providers include:

Netlify

Hosts the application and provides the database, private file storage, content delivery, and operational logging used by Glass Figures.

Resend

Receives your email address and sign-in-email contents to deliver passwordless authentication messages.

These providers may process information for us under their own contracts and privacy commitments. We may also disclose information if reasonably necessary to comply with a valid legal request, protect rights or safety, investigate fraud or abuse, or complete a merger, financing, acquisition, reorganization, or sale of the Service. If ownership changes, this policy continues to apply unless you are told otherwise.

Exports and sharing you choose

When you export a Figure, Glass Figures creates the image on your device from its geometry and colors. Notes, descriptors, and photos are not included. If you then download or share that image using your browser or device, the destination’s rules apply. Glass Figures does not currently publish your journal or Figure publicly.

No sale or behavioral advertising

We do not sell personal information or share it for cross-context behavioral advertising. We do not show targeted advertisements. If that changes, we will update this policy and provide any choices required by law before using information that way.

Cookies and local storage.

Signed-in Glass Figures uses cookies that are necessary to authenticate you, keep your session secure, and complete one-time email sign-in. Blocking those cookies may prevent the signed-in application from working.

We do not currently use advertising cookies or third-party analytics cookies. Basic hosting and security logs may still be created when you request a page.

On mobile, the Service may use local storage on your device to remember when an app installation invitation is appropriate and whether you dismissed it. This does not contain journal entries, notes, photos, or account identifiers.

Retention and deletion.

Account and journal records are kept while your account is active so your Figure and memories remain available. Authentication tokens and sessions expire according to their configured lifetimes; a sign-in link expires after 30 minutes and can be used only once.

You can delete individual journal entries and photos in the Service. Deleting an entry removes the entry and its photo records and starts deletion of the associated stored photo files. Because storage cleanup is best-effort, contact us if a deletion appears incomplete.

To request deletion of your entire account, email privacy@glassfigures.app from the address associated with it. We may ask you to verify the request. Limited copies may remain temporarily in backups, security records, or service-provider systems, and we may retain information when required by law or reasonably needed to prevent abuse and resolve disputes.

Your choices and rights.

You can review and change your display name, timezone, daily colors, notes, descriptors, and photos through the Service. You can delete individual entries and sign out at any time.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of personal information, or to object to or restrict certain processing. You may also have the right to appeal our response and to exercise your rights without discrimination. Send requests to privacy@glassfigures.app. We will verify and respond to requests as applicable law requires.

Because we do not sell personal information or use it for cross-context behavioral advertising, there is no sale or targeted-advertising opt-out required for our current practices.

Not for children under 13.

Glass Figures is a general-audience service and is not directed to children under 13. You may not use the Service if you are under 13. If we learn that we collected personal information from a child under 13, we will take reasonable steps to delete it. A parent or guardian who believes a child provided information can contact us at privacy@glassfigures.app.

How we protect what is kept.

Journal data is private by default. Private database requests are scoped to the signed-in account. Photos are stored behind non-public object references and served only after an ownership check. We use passwordless authentication and take reasonable administrative and technical measures designed to protect information.

No online service can promise perfect security. Keep sign-in links and access to your email account private. If you believe your account or information has been compromised, contact us promptly.

When this policy changes.

We may revise this policy as Glass Figures changes. We will post the new version here and update its effective date. If a change materially affects how we use journal information, we will provide additional notice when reasonably appropriate before the change takes effect.