1. Overview

At GlyphGoblin ("we", "our", or "us"), accessible from glyphgoblin.dev, we prioritize the privacy and autonomy of developers and designers. We build utility software designed for maximum performance, minimal tracking, and zero selling of personal data.

This Privacy Policy explains how information is collected, used, and safeguarded when you visit our website, search or download assets, create an account, or purchase access to GlyphGoblin Pro.

2. Information We Collect

We only collect information strictly required to operate the service and provide reliable asset distribution:

Account Details: When you sign up via email, GitHub, or Google OAuth, we store your email address, an encrypted representation of your password (for email accounts), and account verification status.
Authentication Data: Cryptographic session tokens and authentication cookies necessary to maintain active logins.
Transaction & License Records: When you purchase a Pro membership, we record your payment status and license identifier provided by our merchant of record (Stripe or Gumroad). We do not store credit card numbers on our servers.
Usage & Telemetry: Anonymized HTTP request logs, search query volume, and aggregate bandwidth metrics to detect abuse, protect against denial-of-service, and maintain high-speed CDN routing.

3. How We Use Your Information

We use the data we collect solely to:

Authenticate your account and grant access to Pro features, commercial exports, and API keys.
Send critical transactional emails (magic sign-in links, account confirmations, password resets).
Enforce rate limits and protect against automated mass data extraction.
Continuously optimize icon search relevance and render speeds.

We never sell, rent, or trade your personal data to third parties, data brokers, or advertising networks.

4. Infrastructure & Third-Party Service Providers

We work with vetted infrastructure partners to host and deliver GlyphGoblin:

Cloudflare & Cloudflare R2: Edge caching, CDN asset delivery, and DDoS mitigation.
Vercel: Application hosting, edge compute, and API route routing.
Turso & LibSQL: Encrypted distributed database infrastructure.
Upstash: In-memory cache and security rate-limiting.
Resend: Transactional email delivery.
Google & GitHub OAuth: Federated authentication when chosen by the user.

5. Cookies and Storage

GlyphGoblin uses essential HTTP cookies and browser LocalStorage solely for essential functionality:

Secure session tokens (via NextAuth).
Your current Sack / selection state and export format preferences (stored entirely in your local browser).

We do not use third-party behavioral advertising trackers or cross-site tracking pixels.

6. Data Rights & Account Deletion

Depending on your location (including the EU GDPR and California CCPA/CPRA), you have rights regarding your personal data:

Request an export of the personal data held about your account.
Request full rectification or permanent erasure of your account and related records.

To request account deletion or exercise data rights, reach out to us at privacy@glyphgoblin.dev. Requests are processed within 30 days.

7. Contact Us

If you have questions about this Privacy Policy or our practices, contact our team:

Email: support@glyphgoblin.dev