Privacy Policy

Glyph · 2026-11-01

1. What we process and why we're allowed to

Without signing in (basis: our legitimate interest in running and improving the Service): a random anonymous ID stored in your browser, the pages you visit, when you enter, share, save or search, when you come back from a space, whether you're a returning visitor, your page language, your country (country code only), the kind of app you opened the site in, and the name of the site that sent you (for example threads or google; never the full address). We don't store names, emails or raw IP addresses.
When you leave or agree with a note (basis: legitimate interest): an anonymous ID issued by our server, the spaces you entered via Glyph (last 50, 7 days), your display name, the note, agree/report records, and a daily-changing IP hash used only against spam.
When you sign in with Google or Kakao (basis: performing our service agreement): your Google account ID or Kakao member number, your Glyph display name, when you confirmed you're 14 or older, sign-up and last sign-in times, saved spaces, visit stamps and notes on your account. From Google we receive only the account ID. We don't request email from Kakao, and we don't store the nickname Kakao sends.
When you submit a space (basis: your consent, given by sending the form): the URL, name, description, theme and (optionally) the creator's Threads handle.

Note text, your display name, the agree count and when it was posted are visible to everyone.
Your real name, photo, email and sign-in provider are never shown.

Anonymous visit records: 13 months.
IP hashes: 2 days.
Notes: until you remove them or delete your account. On deletion, free-text notes are removed and your share of merged sentence notes is subtracted (if you posted that sentence first, your display name may remain on it).
Anonymous notes, agrees and reports: until the note is removed. They're linked only to an anonymous ID and can't identify you.
Notes lowered by reports or hidden by the Operator: deleted 6 months after posting.
Submissions: while the space is listed. Submissions we decide not to list are deleted after 1 year.
Account data, saved spaces and stamps: until you delete your account.
Sign-in: 60 days, renewed while you keep visiting. Sign-up confirmation data: 10 minutes.

Data is destroyed without delay once its retention period ends or its purpose is fulfilled. Expired records are deleted automatically once a day; account deletion happens immediately.
Electronic files are deleted so they can't be recovered. We don't keep paper records.

Cloudflare, Inc. (USA, cloudflare.com/privacypolicy): hosting, storage of all data in section 1, bot checks on the submit form (Turnstile), and automated checks of free-text notes (if enabled). Transferred over the network whenever you use the Service and stored on Cloudflare servers in Korea and abroad, for the periods in section 4.
GitHub, Inc. (USA, docs.github.com/site-policy/privacy-policies): storing and reviewing submissions. Transferred when you submit and kept as an operational record.
External fonts (Google Fonts by Google LLC, jsDelivr): your browser sends connection data such as your IP address to these services to download font files. Glyph doesn't receive this data.
Sign-in (Google LLC, Kakao Corp.): each company runs its own sign-in screen; Glyph receives only the result (an account ID).
To avoid international transfer, don't sign in or submit spaces. Opening the site at all passes through Cloudflare, so the site can't be used without it.

You can delete your account from the account menu at any time, and remove your own notes with 'Remove'.
The anonymous ID, saved spaces and stamps in your browser are removed when you clear site data.
Send requests to access, correct, delete or stop processing your data to hello@glyphub.com. We reply within 10 days. You may also act through a representative.
People under 14 can't create an account.

Sign-in (__Host-glyph_session, 60 days), sign-in in progress (__Host-glyph_oauth, 10 minutes), sign-up confirmation (__Host-glyph_signup, 10 minutes).
Anonymous note ID (glyph_anon, 400 days) and entered spaces (glyph_v, 7 days), both signed by our server so they can't be altered.
A cookie that counts repeat entries to the same space once per 30 minutes (glyph_go, no identifiers).
In some in-app browsers without local storage, the anonymous ID, saved spaces, stamps, language, display name and visit records are stored in cookies of the same name instead (up to 400 days).
No advertising or cross-site tracking cookies.
How to refuse: block or clear cookies and site data in your browser settings. If you do, sign-in, notes, saved spaces and stamps won't work.

All connections use HTTPS.
Sign-in tokens are stored only as hashes; sign-in and anonymous ID cookies are HttpOnly and Secure so page scripts can't read them.
We collect only what we need; only designated admin accounts can moderate notes, and only the operator can access the database.

연두온랩스, representative (privacy) · hello@glyphub.com · Business registration no. 693-64-00895
Send privacy questions, complaints and requests for remedies to the contact above.

We'll announce changes 7 days in advance (30 days for important changes) on this page and on the site.