Privacy Policy

GlassPing, Inc. (“GlassPing”, “we”) operates glassping.net and the owner app at app.glassping.net. We are the data controller for the information described below. Contact us at contact@glassping.net.

• Your email — given when you sign up, used to confirm the address, deliver your QR code, send your inbox magic link, and reach you about your account.
• Messages sent to your code — the text and any photo a scanner submits, routed to your inbox and deleted automatically at the end of your retention window (see section 6).
• Replies you write — if you are on Plus and reply to a message, we store the reply until the message it belongs to is deleted.
• A scanner session token — when someone sends you a message, their browser is given a random token, stored on the message and set as a cookie on that sticker’s scan page. It exists solely so they can come back and read your reply. It contains no identity, is never shown to you, and disappears with the message.
• Subscription data — if you subscribe to Plus, we store the LemonSqueezy subscription and customer identifiers, the plan status, and the renewal or end date. We never see or store your card details.
• Basic technical data — for example, log and device data needed to run the service securely, and a one-way keyed hash of the sender’s IP address used for rate limiting and, if you block someone, for the block list.

We do not ask a scanner for their phone number or name, and we never expose your phone number to a scanner. Replies are anonymous in both directions: they learn nothing about you, and you learn nothing about them.

We use your data only to deliver the product, route messages to you, provide support, and keep the service secure and lawful. We do not sell your data, and we do not share it with advertisers or data brokers. The QR code is free; we make money when someone chooses to subscribe to GlassPing Plus — that is the entire business model.

Where the GDPR applies, we rely on:

• Performance of a contract — to deliver your QR code, route messages to your inbox, and, if you subscribe, to provide and bill for GlassPing Plus.
• Legitimate interests — to keep the service secure and prevent abuse (for example, rate-limiting messages using a one-way, keyed hash of the sender’s IP).
• Consent — when a scanner chooses to share their approximate location; location is never collected unless they opt in.

We share the minimum necessary data with a small set of service providers:

• Lemon Squeezy — our Merchant of Record for GlassPing Plus. They process the subscription payment and hold your billing details and invoices. Only relevant if you subscribe; free accounts never reach them.
• Resend — delivers transactional email (your QR code, magic links).
• Supabase — our database and file storage; holds your inbox, message text, and any photos a scanner submits.
• Vercel — hosts the website and app, and provides privacy-friendly, cookieless usage analytics.

Each acts as a processor under contract and may not use your data for its own purposes.

Message retention depends on your plan and is set when the message arrives — text and photo alike are deleted together:

• Free — 30 days. Photos stop being viewable after 48 hours, though the file itself is deleted on the same 30-day schedule as the message.
• Plus — 365 days, photos included, for the whole period.

If you subscribe, messages you already have are extended to the Plus window. If your subscription ends, they are shortened back toward the free window — but never to less than seven days from the moment of the change, so nothing vanishes the instant a payment lapses. A plan change never deletes your stickers, your code or your account.

Account records are kept while your inbox is active and for as long as we are legally required to retain them (for example, tax records held by our Merchant of Record). You can delete your inbox and all its data at any time from the app’s settings, or ask us to do it for you.

Wherever you live, you can ask us to access, correct, export, or delete your personal data, and we will honor it. Deleting your inbox is self-serve in the app’s settings; for access or export requests, email us and we will respond. If you are in the EU/UK (GDPR) or California (CCPA), you have these rights by law, including the right not to be discriminated against for exercising them. To make a request, email contact@glassping.net.

The marketing site uses only the cookies and local storage needed to run it — for example, remembering your light/dark theme. Our usage analytics (Vercel Web Analytics) is cookieless and does not identify you individually. We do not run third-party advertising trackers. Our payment provider may set cookies necessary for secure checkout.

GlassPing is not directed to children under 16, and we do not knowingly collect their data.

We will update this policy as needed and revise the “last updated” date above. For any privacy question or request, contact contact@glassping.net.