Last updated: 2026-05-23

Privacy Policy

What we collect, why we collect it, and how to get it out of our systems if you want it gone.

This document is a starting-point template. Please have an attorney review it before relying on it for compliance in your jurisdiction.

What we collect

When you sign up for Glated, we ask for your email address. That's the minimum we need to give you an account. If you build a bio page, we store the content you put on it — links, text, images, themes, settings. We also collect basic analytics about how your pages perform: views, clicks, referrers, rough geography. We don't sell this to anyone.

Why we collect it

Three reasons. First, authentication — your email is how you log in. Second, the product literally cannot function without your page content; that's the product. Third, anonymous aggregates help us understand what's working and what's broken so we can ship better updates.

How long we keep it

Until you delete your account. When you delete, we wipe your pages, your settings, and your analytics within thirty days. Backup retention may carry residual copies for an additional 30 days before they roll off.

Third-party processors

We use a small set of vendors to run Glated. Each one only sees the slice of data they need:

  • Supabase — primary database and auth.
  • Vercel — hosting and edge serving.
  • Resend — transactional email (login links, notifications).
  • Anthropic — AI features (bio writer, themes, captions).
  • OpenAI — AI features (image generation, fallback models).
  • Cloudflare — CDN and DDoS protection.

Your rights

If you're in the EU, UK, or California — or really, anywhere — you can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Under GDPR and CCPA you have the right to access, portability, correction, and erasure. Email us and we'll handle it within 30 days.

Cookies

We use essential cookies to keep you logged in. We use analytics cookies to count visits in aggregate. We do not use third-party advertising cookies. You can clear them anytime from your browser; the worst that happens is you'll have to log in again.

Where your data lives

Servers are primarily in the United States. For users in the EU and UK, transfers are covered by Standard Contractual Clauses with our processors. We do not transfer data to jurisdictions that aren't covered by an adequacy decision or equivalent safeguard.

Children

Glated is not for anyone under 13. If you believe a child has signed up, email us and we'll remove the account.

Changes to this policy

If we change something material, we'll update the date at the top and send a notice to your account email. Keep using Glated after a change and you're agreeing to the update.

Contact

Questions, data requests, complaints — email hello@glated.com. A real person reads every message.