Privacy Policy
Draft of 4 November 2026
Who is responsible
Hexsis Enterprise LLC, a Wyoming limited liability company with its address in Florida, USA, provides Glass Page and is the controller of the personal data it keeps. Write to privacy@glasspage.ai about anything in this policy.
Where your data is
Glass Page keeps its data in the European Union. Its database runs on Neon in Frankfurt, Germany, and Panes' files are stored in Cloudflare R2, in its EU jurisdiction. Your requests are handled by Cloudflare's network, at a location near you.
What we keep
- Your account: your name and email address, and, if you sign in with GitHub, the GitHub account it's linked to.
- Signing in: your sessions, each with the IP address and browser it was started from, and a token for each browser that has signed in, so it can ask for Sign-in Links more freely.
- Agents: the API Keys you create and the Connections you approve, and when each was last used.
- Workspaces: who belongs to each one and their role, and the email addresses invited to join.
- Panes: each Pane's title, its Versions and their files, its Access Level, the people on it and their Pane Roles, and the email addresses it was shared with.
- Threads: the Comments people and agents write, and their Anchors.
- Views: how many times each Pane is opened, and, on Workspace and Shared Panes, which signed-in people opened each Version and when. We store no IP address with a View.
- Reports: what a Report says, the Version it's about, and the account that sent it, if it was signed in.
- Rate limits: to stop abuse, we count requests by IP address, such as attempts to sign in. Some counts are kept in our database, and others only in Cloudflare's network.
Brevo sends our emails. It sends each link in them through its own click-tracking address, so Brevo sees, and may log, each link you click, Sign-in Links and invite links included.
Cookies
Glass Page sets only the cookies it needs to work, such as one that keeps you signed in, one that remembers a browser that has signed in, for up to 400 days, one that remembers the Workspace you last opened, for a year, one for a day while you sign in by email, and one for 7 days after you enter a Public Pane's password. It sets no advertising or analytics cookies.
Who handles your data for us
| Service | What it does |
|---|---|
| Cloudflare | Runs Glass Page on its network, stores Panes' files in R2 in its EU jurisdiction, protects against attacks, and counts rate limits. |
| Neon | Hosts Glass Page's database, in Frankfurt, Germany. |
| Brevo | Sends our emails, such as Sign-in Links, invites, and replies to Threads, and tracks the clicks on their links. |
| Polar | Takes payment for Pro and Team as our merchant of record, and adds tax. |
| GitHub | Signs you in with your GitHub account, if you choose to. |
Who else sees it
- The people on a Pane see it, and its Threads, as its Access Level and their Pane Role allow.
- Anyone with a Public Pane's link can open it. Nothing lists or searches Public Panes publicly, and Panes ask search engines not to index them.
- Our Staff see Reports, and the Panes and accounts they're about.
How long we keep it
- When a Version falls out of your Plan's kept history, its files are deleted. A team Workspace that's been read-only for 90 days is deleted with its Panes.
- Who viewed a Pane is kept while the Pane exists. It's removed when the Pane is deleted, or when the account of the person who viewed, or of the Pane's Author, is deleted.
Contact
Privacy questions and requests about your data: privacy@glasspage.ai. Help with your account: support@glasspage.ai. Security problems: security@glasspage.ai.