Privacy Policy
The short version. This policy covers glasscase.net (this website). The GlassCase iPhone app is not yet available; when it is, we will update this policy to describe it. Today, the only personal data we collect through this site is the email address you submit to our product-update list and the standard request logs our hosting provider keeps. We don't sell your data, run advertising, or use third-party tracking pixels.
1. Who this policy covers
This policy describes the data practices of glasscase.net (the "Site"), operated by GlassCase LLC, a limited liability company organized in the State of Indiana, USA ("we", "us", "our").
The GlassCase iPhone app is in development and is not yet available to the public. When it becomes available, we will publish an updated privacy policy that covers the app and notify subscribers to our product-update list before it takes effect.
2. What we collect
Email address (only if you submit our signup form)
The Site has a signup form where you can ask to be notified about GlassCase. If you submit it, we store:
- The email address you provide
- Whether you opted in to receive product news and show-floor pricing insights
- The date and source of your signup (so we know which page you signed up from)
We use this only to (a) notify you when GlassCase becomes available and (b) send occasional product updates if you opted in. We do not sell, rent, or share this list with anyone.
Standard request logs
Our hosting and edge-network providers automatically record standard request information when you visit the Site, including:
- IP address
- Page or resource requested
- Browser user-agent string
- Referrer (the page you came from, if any)
- Timestamp
These logs are used to operate the Site, defend against abuse and denial- of-service attacks, and produce anonymous traffic counts. They are retained for a short operational period (typically up to 30 days) and then deleted in normal log rotation. We do not use these logs to build a profile of you.
What we do not collect
The Site does not use third-party analytics platforms (such as Google Analytics), advertising networks, or tracking pixels. We do not set advertising cookies. We do not collect your name, phone number, location, advertising identifier, or browsing history outside of the Site.
3. How we use your data
- To notify you when GlassCase launches — sent to everyone who submits the signup form.
- To send product news and pricing insights — only if you checked the optional opt-in box on the signup form. Every email includes instructions to unsubscribe.
- To respond to messages you send us at support@glasscase.net.
- To operate, secure, and improve the Site using request logs.
We do not:
- Sell your email address or any other personal data
- Share your email address with other companies for their marketing
- Use your data for advertising or behavioral profiling
- Track you across other websites
4. Third-party services we use
| Service | What it does | Data it processes | Their privacy policy |
|---|---|---|---|
| Cloudflare | Serves the Site, provides DDoS protection, and routes requests to our backend | Standard request metadata (IP address, request path, user agent) | cloudflare.com/privacypolicy |
| Hetzner | Hosts our backend server (located in Helsinki, EU), which receives signup-form submissions | Email addresses submitted via the signup form, plus standard request metadata | hetzner.com/legal/privacy-policy |
If we add a new third-party service that processes your data in a new way, we will update this list before that change takes effect.
5. Security
We take reasonable technical and organizational measures to protect your data:
- All traffic to the Site is served over HTTPS (TLS)
- Our backend enforces rate limits to mitigate abuse
- Server credentials and API keys are stored in environment configuration, not in source code
- Access to production systems is limited to the GlassCase team
No system can be guaranteed perfectly secure. If we discover a breach affecting your email address, we will notify you using that address.
6. Data retention
- Signup-list email addresses are kept until you unsubscribe or ask us to delete your address.
- Request logs are kept for a short operational period (typically up to 30 days) and then deleted.
- Email correspondence with us at support@glasscase.net is kept for the duration of the conversation and a reasonable period after, in case we need to follow up.
7. Your rights
You have the right to access, correct, export, or delete the personal data we hold about you. To exercise any of these rights:
- Unsubscribe or delete your email from our list: email support@glasscase.net. We remove the address within 30 days.
- Request a copy of the data we hold about you: email support@glasscase.net. We respond within 30 days.
Depending on where you live, you may have additional rights under laws such as the GDPR (EU/EEA/UK) or the CCPA/CPRA (California), including the right to lodge a complaint with a supervisory authority. We honor these rights for all users.
8. International users
GlassCase LLC is based in the United States. Our backend server is hosted in the European Union (Hetzner, Helsinki). When you submit the signup form, your email address is transmitted to and stored on our server in the EU.
9. Children's privacy
The Site is intended for adult trading-card vendors and is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data through the Site, contact support@glasscase.net and we will delete it.
10. Changes to this policy
We may update this policy from time to time. If we make a material change — for example, adding a new third-party service or beginning to collect a new category of information — we will update the "Last updated" date at the top of this page and, where appropriate, notify subscribers to our signup list before the change takes effect.
The current version is always available at glasscase.net/privacy.
11. Contact
Questions about this policy or your data:
- Email: support@glasscase.net
For postal correspondence regarding privacy or data requests, contact us by email and we will provide a mailing address.