Privacy Policy

1. Hosting

This website is hosted by Teral.dev. Teral may process technical information such as IP address, browser and device information, access times, requested pages, and technical or error logs when this is necessary to operate and secure its services. Please also see Teral’s Privacy Policy.

2. Analytics

Glasscat also uses PostHog for optional product analytics and error monitoring. If you choose “Allow analytics”, PostHog can receive information about how Glasscat is used, such as browser and device information, pages visited, errors, and selected interactions. These interactions include newsletter requests, reactions, quizzes, and games. Glasscat does not send account passwords to PostHog.

PostHog is only started after you give permission in Glasscat’s consent prompt. You can change your choice at any time using the Analytics preferences link in the footer. If you decline or withdraw permission, Glasscat stops sending new PostHog data. Your PostHog project uses PostHog EU Cloud and is hosted in the EU, in Frankfurt, Germany. Client IP data capture is disabled, and a Data Processing Agreement is in place. The configured retention period for future PostHog recordings is 30 days. You can read more about PostHog’s GDPR guidance here.

We use consent for this optional analytics processing. Glasscat records the choice and time using an anonymous consent ID so it can show when consent was given or withdrawn. The record does not include your account password or email address.

3. Fonts

This website uses locally hosted fonts provided via Next.js (next/font).

No connection to external font providers (such as Google Fonts servers) is established when visiting this website.

4. Embedded Content

This website includes embedded content from third-party platforms such as:

• Posts from X (formerly Twitter)
• Spotify
• Apple App Store
• External websites and shops

When interacting with such content, data may be transmitted to the respective provider.

5. Contact Form

If you contact us via the contact form, your submitted data will be processed using Resend.

The data will only be used to process your request. Personal data is only stored for as long as necessary to fulfill the respective purpose or as required by law.

6. Newsletter

If you subscribe to the newsletter, your email address will be processed in order to send you updates and content related to this website.
The newsletter is sent using Resend..

You can unsubscribe from the newsletter at any time via the unsubscribe link included in every email.

Your data will be used exclusively for sending the newsletter and will not be shared with third parties. Personal data is only stored for as long as necessary to fulfill the respective purpose or as required by law.

7. Accounts and authentication

If you create a Glasscat account, we use your account information to create and maintain the account, sign you in, provide bookmarks and reactions across devices, and send account messages such as verification and password-reset emails.

For email-and-password sign-in, you provide a username, email address, and password. The password is protected before it is stored and is not stored in readable form. Email verification is required. Only the username may be publicly visible. Your email address and authentication information are private.

You can also sign in with Google or Apple. These providers confirm your identity and may send Glasscat your provider account ID, name, profile image, email address, and whether the email is verified. Apple may use a private-relay email address, and may only provide the email address during the first sign-in. Glasscat does not receive your Google or Apple password. These fields and the linked provider sign-in record are stored by the account system when provided.

Better Auth runs Glasscat’s account sign-in system. Google and Apple provide the social sign-in service. Glasscat stores the account records in its Supabase-hosted PostgreSQL database; the configured Supabase connection points to the Frankfurt region. Supabase acts as a service provider for the database under a Data Processing Addendum and maintains a current subprocessor list, available in its Legal Hub. The existing sections on third-party services, international transfers, retention, and email processing also apply here.

We need this information to provide the account service you request. This is processing necessary for our agreement with you under Art. 6(1)(b) GDPR. We may also use account and session information to protect Glasscat against attacks, fraud, and abuse. That processing relies on legitimate interests under Art. 6(1)(f) GDPR. The balancing assessment for this security processing is documented separately.

A username, email address, and sign-in method are required to create an account. Email-and-password sign-in also requires a password. Google or Apple must provide the information needed to identify you and create the account. If you do not provide the required information, we cannot create or maintain the account.

Glasscat uses a protected session cookie to keep you signed in and to protect account features. It is used for authentication, not advertising. Sessions normally expire after seven days. You can view and revoke active sessions from your account settings.

You can delete your account from the account settings page. This removes the active account, linked sign-in methods, sessions, bookmarks, and reactions. The account, sign-in, session, bookmark, and reaction records are deleted. No additional account records are retained outside the systems and retention practices described in this Privacy Policy. The deleted username and email are removed from the active account database.

8. Cookies and Local Storage

This website uses:

• Local Storage (e.g. for user interface preferences)
• Technically necessary storage mechanisms used by embedded third-party content

Glasscat stores your analytics choice and an anonymous consent ID in browser storage. PostHog uses browser storage only after you allow analytics. Glasscat also uses a protected session cookie when you sign in.

These are used to improve functionality and user experience.
To delete cookies, you can set your browser to block them. However, this may affect the functionality of the website.

9. Information about Third-Party Services

Some third-party services used on this website, including embedded content and email-related services, may involve the transfer of personal data to countries outside the EU/EEA (e.g. the United States).

Where required by applicable law, such transfers are subject to appropriate safeguards, such as Standard Contractual Clauses or other lawful transfer mechanisms.

10. Legal Basis for Processing

Personal data is processed on the basis of Art. 6(1) GDPR:

• Art. 6(1)(a) – Consent (e.g. newsletter subscription and optional PostHog analytics)
• Art. 6(1)(b) – Contract necessity (e.g. account creation, authentication, and account features)
• Art. 6(1)(f) – Legitimate interests (e.g. website analytics, security, functionality)

11. Right to Access, Correction, Deletion and Restriction of Data Processing

The GDPR (General Data Protection Regulation) provides rights to access, correct, delete, and restrict the processing of personal data.

You have the right to:

• Access your stored data
• Request correction or deletion
• Restrict processing
• Object to data processing

You are always entitled to lodge a complaint with a supervisory authority.
To exercise these rights, please contact us using the contact information provided below.

12. Controller and Contact

In case of questions or concerns regarding this Privacy Policy, please contact us at:

studiis - Philip Langenbrink
Philip Langenbrink
In der Behrenbeck 37b
45527 Hattingen
Germany

E-mail: [email protected]

For more information visit the imprint.