Privacy Policy

Effective date: 2026-06-06 · Last updated: 2026-06-06

1. Who this policy covers

This policy applies to the GlassCase iPhone app (the "App") and the glasscase.net website (the "Site"), both operated by GlassCase LLC ("we", "us"). It describes the data we collect from you when you use the App, when you visit the Site, and when you contact us.

2. Data you store in the App

GlassCase is designed to work primarily on your device. The following data is stored locally on your iPhone using SwiftData (Apple's on-device database):

• Your inventory (card names, conditions, quantities, cost basis, asking prices)
• Your transactions (sales, trades, purchases, payment-method labels, totals)
• Your show history (names, dates, locations, drawer counts)
• Your app settings (tax rate, store name, optional store logo image, payment-method preferences)

iOS encrypts this on-device storage when your phone is locked using Apple Data Protection. The App is fully usable offline; your device is the source of truth.

If you choose to sign in (see Section 3), this data is also synced to your GlassCase account on our servers so you can access it from another device or restore it after reinstalling the App.

Backups and exports

The App can export a backup of your data to a file on your device or to iCloud Drive. These backup files are not encrypted with a separate password — they rely on the protections of the storage location you save them to. Treat backup files like any other sensitive business document.

3. Account data (if you sign in)

GlassCase uses Sign in with Apple. When you sign in for the first time, Apple sends us a stable, anonymous user identifier and (only on first sign-in) the email address associated with your Apple Account, which you can choose to hide using Apple's email-relay service.

We do not collect your name, phone number, precise location, advertising identifier (IDFA), contacts, calendar, or any data from other apps.

4. Camera and on-device scanning

The App can use your iPhone camera in two places:

• Barcode scanning when adding inventory or processing a sale.
• On-device card scanning (OCR) to read text off a card or a graded slab so you don't have to type it in. The image is processed locally on your iPhone using Apple's Vision framework. The camera image itself is not uploaded to our servers and is not retained after the scan.

The App requests camera permission only when you first use one of these features. You can revoke the permission at any time in iPhone Settings → GlassCase.

5. Website data

When you visit glasscase.net, we collect minimal information:

• Standard server logs from our hosting provider (Cloudflare), including IP address, request path, user agent, and timestamp. Used to operate the site, defend against abuse, and produce anonymous traffic counts. Logs are retained for a short period and not used to build a profile of you.
• If you submit the email signup form on the Site, we store the email address you provide along with whether you opted in to product updates. Used to send you a notification when GlassCase becomes available and, if you opted in, occasional product news. You can unsubscribe by emailing support@glasscase.net.

The Site does not use third-party analytics, advertising, or tracking pixels.

6. How we use your data

• To operate the App and your account: authenticating you, syncing your data between devices, and providing support.
• To respond to you: answering questions you send to support@glasscase.net.
• To send essential account communication: for example, notifying you of a security incident or a material change to this policy.
• To send product updates only if you opted in via the Site signup form. You can opt out at any time.
• To debug problems and improve the App based on what you tell us in support requests.

We do not:

• Sell your personal data to anyone
• Share your inventory, transactions, or other business data with third parties or with other GlassCase users
• Use your data for advertising or to track you across other apps and websites

7. Third-party services we use

We do not use any third-party analytics, advertising, or crash-reporting SDKs in the App. If we add a service that processes your data in a new way, we will update this list before the change takes effect.

8. Security

We take reasonable technical and organizational measures to protect your data:

• All traffic between the App and our servers is sent over HTTPS
• Authentication is handled via Sign in with Apple; we never store passwords
• API requests are authenticated with short-lived JSON Web Tokens (JWTs)
• Our server enforces rate limits to mitigate abuse and brute-force attempts
• Server credentials and API keys are stored in environment configuration, not in source code
• Authentication events are recorded so we can detect suspicious activity
• Access to production systems is limited to the GlassCase team

No system can be guaranteed perfectly secure. If we discover a breach affecting your data, we will notify you using the email address on file.

9. Data retention

• Account data is kept for as long as your account is active. If you delete your account (Section 10), we remove your account record and your synced inventory, transactions, and settings within 30 days.
• Email signups from the Site are kept until you unsubscribe. If you unsubscribe, we remove your address from the active list.
• Server logs are kept for a short operational period (typically up to 30 days) and then deleted in the normal course of log rotation.

10. Your rights and how to exercise them

You have the right to access, correct, export, or delete the personal data we hold about you.

• Delete your account from inside the App: Settings → Danger Zone → Delete Account. This sends a deletion request to our servers; we complete the deletion within 30 days.
• Request access, correction, export, or deletion by email: contact support@glasscase.net. We respond within 30 days.
• Unsubscribe from product emails from the Site signup by emailing support@glasscase.net.

Depending on where you live, you may have additional rights under laws such as the GDPR (EU/EEA/UK) or the CCPA/CPRA (California), including the right to lodge a complaint with a supervisory authority. We honor these rights for all users.

11. International users

GlassCase LLC is based in the United States. Our servers are currently hosted in the European Union (Hetzner, Helsinki). When you use GlassCase, your data may be transferred to and stored in either jurisdiction.

12. Children's privacy

GlassCase is a business tool intended for adult vendors. The App is not directed at children under 13, and we do not knowingly collect personal data from children. If you believe we have collected data from a child, contact support@glasscase.net and we will delete it.

13. Changes to this policy

We may update this policy from time to time. If we make a material change — for example, adding a new third-party service that processes your data, or beginning to collect a new category of information — we will update the "Last updated" date at the top of this page and, where appropriate, notify you in the App or by email before the change takes effect.

The current version is always available at glasscase.net/privacy.

14. Contact

GlassCase LLC is a limited liability company organized in the State of Indiana, USA. Questions or requests:

• Email: support@glasscase.net

For postal correspondence regarding privacy or data requests, contact us by email and we will provide a mailing address.

15. App Store privacy label

The following is what we declare in our App Store privacy label:

Data linked to you

• Contact info: Email address — for account support and essential account communication.
• Identifiers: Apple user identifier — for authentication.

Data not linked to you

None at this time.

Data used to track you

None. We do not track users across other apps or websites.