Glint Privacy Policy

1.1. This Privacy Policy explains how Glint (“Glint,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with the Glint website, dashboard, widgets, browser sources, waitlist, and related services (collectively, the “Service”).

1.2. This Policy applies to all visitors, waitlist signups, registered Users, and anyone who otherwise interacts with the Service. It should be read together with our Terms & Conditions.

1.3. By using the Service, you acknowledge that your information will be processed as described in this Policy. If you do not agree with this Policy, you should not use the Service.

2.1 Account & Registration Information

If you create a Glint account, we may collect information such as your email address, display name, and account identifiers, whether provided directly by you or supplied by an OAuth provider you use to sign in.

During onboarding we may also ask an optional question about how you would describe yourself, such as whether you are a live streamer, a VTuber, or a content creator. Answering is entirely optional, nothing is preselected, and skipping it has no effect on your account or your access. Where you do answer, the response is stored with your profile and used to understand who is using Glint and to make what we send you more relevant. It is not sold or shared with unrelated third parties.

2.2 Waitlist Information

If you join the Glint waitlist prior to general availability, we collect the email address you provide, the approximate time of signup, and, where applicable, technical information such as your IP address used for basic abuse and rate-limit prevention (for example, to prevent duplicate or automated signups). Waitlist email addresses are not sold or shared with unrelated third parties.

We use that address for two distinct purposes, on two distinct bases. Notices about Glint’s launch, availability, and material changes to the Service are sent because you asked to be told about them by joining the waitlist. Marketing email, meaning news, tips, offers, and similar promotional messages, is sent only if you separately opt in, and we record whether you did and the date on which you did.

Opting in is never a condition of using Glint, and declining changes nothing about your access. You may withdraw consent at any time, either through the unsubscribe link in any marketing email or by contacting us using the details in Section 18. Withdrawing consent does not stop service and launch notices, which do not rely on it.

2.3 OAuth Data from Connected Services

If you authenticate using or connect a supported third-party provider, we may receive the following categories of information via that provider’s API, depending on the provider and the permissions you grant:

We process this OAuth-derived information solely to authenticate you, operate your account, verify entitlements or membership status, and provide the corresponding features of the Service. We do not have access to, and do not process or store, full payment card information, passwords for Connected Services, or private messages from any Connected Service.

2.4 Widget Profiles & Customization Settings

We store the Profile settings you create, including layout, color, waveform, album glow, crop and resize, display mode, and preset configurations, so that your Widgets render consistently and persist across sessions and devices. Profile data is associated with your account (or, for anonymous or pre-authentication use, with a local browser- or device-scoped identifier).

2.5 Browser Source Identifiers

Browser Source URLs generated by the Service may include a profile identifier or public slug that allows the Service to render the correct Widget for that URL. These identifiers do not by themselves reveal your account credentials, but you should treat any Browser Source URL as sensitive, since anyone with the URL can view the Widget it renders (see Section 7.2 of our Terms & Conditions).

2.6 Cookies & Similar Technologies

We use cookies and similar technologies (such as local session tokens) strictly to maintain login sessions, enable secure authentication, and remember basic preferences. See Section 5 (Cookies Policy) for details.

2.7 Local Browser Storage

Certain customization data, including in-progress Widget settings, layout preferences, and cached configuration, may be stored locally in your browser using localStorage or comparable browser storage mechanisms. This data: (a) may be synchronized to our servers to enable cross-device access to your Profiles, where you are signed in; and (b) if not synchronized, remains solely on your device and is not transmitted to or accessible by Glint. If you clear your browser storage, locally cached settings not otherwise synced to your account may be lost.

2.8 Server & Infrastructure Logs

Our infrastructure providers (see Sections 6.8 and 6.9) may automatically generate server logs and technical metadata as part of standard infrastructure operations, which may include IP addresses, request timestamps, user-agent strings, and similar technical data. This information is generated and, where applicable, retained at the infrastructure level for operational, security, and abuse-prevention purposes, and is not used by Glint for behavioral profiling or advertising.

2.9 Communications & Support Requests

If you contact us for support or otherwise communicate with us, we collect the information you provide in that communication (such as your email address and the content of your message) in order to respond to and resolve your request.

2.10 Analytics & Telemetry

As of the Effective Date, Glint does not intentionally deploy advertising trackers, cross-site behavioral advertising tools, or session-replay software, and does not perform behavioral profiling of Users. We may in the future introduce privacy-conscious product analytics or crash and error telemetry to help us diagnose issues and improve the Service (for example, aggregate feature-usage statistics or automated crash reports). If we do, we will update this Policy accordingly before or at the time such functionality is introduced, and will design such tools to minimize the collection of personal information wherever reasonably possible.

2.11 Membership & Billing Information

Paid memberships are sold and billed through Whop, an independent third-party payment and membership platform. Whop is not an identity provider for Glint, and you do not sign in to Glint using Whop.

When you begin a purchase from within Glint, we create a checkout session with Whop that carries your Glint account identifier so that the resulting membership can be matched to the correct account. Where a purchase is made outside that flow, we may instead match the membership using the email address associated with it.

Where a membership exists, we receive from Whop and store: a membership identifier, a plan identifier, the membership status (such as active, trialing, past due, canceling, or expired), the date the current billing period ends, and, where provided, the email address associated with the membership. We use this information solely to determine whether your account is entitled to paid features.

We do not receive or store your payment card details, billing address, or any other payment credentials. All payment processing, billing, renewal, and cancellation is handled entirely by Whop under its own terms and privacy policy.

We use the information described in Section 2 to:

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

Where the General Data Protection Regulation (“GDPR”) applies, our legal bases for processing personal information include:

5.1. We use cookies and similar technologies strictly for purposes such as: maintaining your login session; enabling secure authentication; managing session tokens; and remembering basic interface preferences (such as your last-viewed settings panel).

5.2. We do not use advertising cookies, third-party behavioral-advertising cookies, or cross-site tracking cookies.

5.3. Disabling or blocking cookies in your browser may impair or disable core functionality of the Service, including your ability to log in or remain authenticated.

We do not sell your personal information. We share information only as described below, or as otherwise disclosed to you at the point of collection.

6.1 Spotify. Used to retrieve now-playing Metadata for your Widgets. Governed by Spotify’s own privacy policy.

6.2 YouTube / Google. Used for authentication and retrieval of publicly available video Metadata. Governed by Google’s Privacy Policy.

6.3 Last.fm. Used to retrieve scrobble and now-playing Metadata. Governed by Last.fm’s privacy policy.

6.4 Discord. Used for authentication and, where applicable, entitlement verification. Governed by Discord’s Privacy Policy.

6.5 Twitch. Used for authentication and, where applicable, entitlement verification. Governed by Twitch’s Privacy Policy.

6.6 Whop. Used to sell and bill paid memberships and to verify entitlement. Governed by Whop’s Privacy Policy. Payment and billing data is processed entirely by Whop; we receive only the membership and status information described in Section 2.11. Whop is not used to authenticate you or to sign you in to Glint.

6.7 Apple / iTunes. Used to retrieve publicly available Metadata via the iTunes Search API or comparable interfaces. Governed by Apple’s Privacy Policy.

6.8 Supabase. Used as our authentication and backend database provider. Supabase processes account, authentication, and Profile data on our behalf as a data processor, subject to Supabase’s own privacy and security practices.

6.9 Vercel. Used as our hosting and infrastructure provider. Vercel may automatically generate server logs and technical metadata as part of standard hosting operations, subject to Vercel’s own privacy practices.

6.10 Future Providers. As Glint adds new Connected Services, payment processors, or infrastructure providers, information may be shared with those providers as reasonably necessary to provide the corresponding functionality. Material additions will be reflected in updates to this Policy.

6.11 Legal & Safety Disclosures. We may disclose information where we believe in good faith that disclosure is reasonably necessary to: (a) comply with a law, regulation, subpoena, court order, or other legal process; (b) protect the safety, rights, or property of Glint, our Users, or the public; (c) detect, prevent, or address fraud, security, or technical issues; or (d) enforce our Terms & Conditions.

6.12 Business Transfers. If Glint is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to standard confidentiality arrangements and, where required by law, notice to affected Users.

7.1. We retain personal information for as long as reasonably necessary to: maintain your active account; provide the Service; verify entitlement and membership status; comply with legal, tax, or accounting obligations; and resolve disputes or enforce our agreements.

7.2. Waitlist information is retained until Glint’s public launch communications relating to that signup are complete, or until you request deletion, whichever is sooner, unless a longer retention period is required by law.

7.3. Where you delete your account, we will delete or anonymize your personal information within a reasonable period, except where retention is required by law or for legitimate business purposes such as fraud prevention, dispute resolution, or enforcement of our agreements.

We implement reasonable technical and organizational safeguards designed to protect personal information, including: HTTPS/TLS encryption in transit; OAuth-based authentication rather than direct password handling for Connected Services; token expiration and validation; access restrictions on backend systems and databases; and data-minimization practices that limit collection to what is reasonably necessary. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we follow industry-standard practices appropriate to the scope and nature of the Service.

9.1. You may request deletion of your account and associated personal information at any time by contacting us at aarmaniarmin@gmail.com.

9.2. We will respond to verified deletion requests within a reasonable timeframe, and in any event within any timeframe required by applicable law.

9.3. Please note that: (a) locally cached browser data not synced to your account must be cleared by you directly through your browser settings; (b) certain information may be retained where required by law, for fraud prevention, or to resolve disputes; and (c) deleting your account will disconnect any Connected Services and disable any Browser Sources associated with that account.

9.4. You may disconnect a Connected Service (such as revoking OAuth access) at any time through that service’s own account settings, which will prevent Glint from making further API requests on your behalf using that authorization.

Glint may process and store information in the United States and other countries in which we or our service providers operate. Where personal information is transferred internationally, we take steps intended to ensure that such transfers comply with applicable data protection laws, including, where applicable, the use of appropriate contractual safeguards such as Standard Contractual Clauses for transfers out of the EEA, UK, or Switzerland.

If you are located in the European Union, European Economic Area, or United Kingdom, you may have the right to:

Our legal bases for processing are described in Section 4. To exercise any of these rights, contact us using the details in Section 18.

If you are a California resident, you may have the right to:

Glint does not sell or share personal information (as those terms are defined under the CCPA/CPRA) and has not done so in the preceding twelve months. To exercise your rights, contact us using the details in Section 18.

Residents of certain other U.S. states with comprehensive privacy laws (including, as applicable, Virginia, Colorado, Connecticut, Utah, and others as such laws take effect) may have rights similar to those described in Sections 11 and 12, including rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of certain processing such as targeted advertising or profiling. Glint does not engage in targeted advertising or the sale of personal information. To exercise any applicable rights, contact us using the details in Section 18, and we will process your request in accordance with the law applicable to your jurisdiction.

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verified parental consent, we will take reasonable steps to delete that information. If you believe a child under 13 has provided us with personal information, please contact us using the details in Section 18.

Some browsers offer a “Do Not Track” feature. Because no common industry standard for interpreting DNT signals has been adopted, the Service does not currently respond differently to browsers with DNT enabled. We do not track Users across third-party websites for advertising purposes.

The Service may contain links to third-party websites or services, including Connected Services. This Policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any third-party site you visit.

We may update this Privacy Policy from time to time. When we make changes, we will revise the “Last Updated” date above and, where changes are material, provide additional notice (such as displaying a notice within the Service or emailing registered Users). Your continued use of the Service after any changes take effect constitutes your acceptance of the revised Policy.

To ask questions about this Privacy Policy, or to exercise any of the rights described above, please contact us at:

We may require you to verify your identity before processing certain requests, and we will respond within any timeframe required by applicable law.