Privacy Policy

Last Updated: Effective:

1. Introduction

This Privacy Policy describes how Gleamr ("we," "us," "our," or the "Service") collects, uses, and shares information when you use our website at gleamr.io and related services.

2. Information We Collect

Information You Provide

  • Account Information: Email address, name, and profile information when you create an account through our authentication provider (Clerk).
  • Content: Articles you save, basic tags you create.
  • Communications: Messages you send to our support team, feedback you provide.

Information Collected Automatically

  • Product Analytics: Limited cookieless product-usage analytics via PostHog (Cloud US), covering page paths and named product events only (such as an article saved or an import completed), plus basic technical information such as browser and device type. When you arrive from one of our campaign links we also record a campaign source as three fixed, validated values (source, medium, campaign) so we can measure which channels bring new readers; these are stored in your browser only after you allow Product Analytics and are deleted if you turn it off, and only those three values are sent, never the full link, referrer, or query string. PostHog generates an anonymous cookieless identifier; we do not send your Gleamr account ID. We do not intentionally send article content, article URLs, search text, email addresses, Gleamr account IDs, or payment identifiers. This analytics data is processed in the United States.
  • Device Information: Browser type, operating system, device type, IP address.
  • Cookies: Session cookies and preference cookies.

Information from Third Parties

  • Authentication Services: Profile information from Clerk when you sign up or log in.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Create and maintain your account
  • Save, organize, and retrieve your articles
  • Process and respond to your requests
  • Send you technical notices and support messages
  • Detect, prevent, and address technical issues
  • Comply with legal obligations

4. Information Sharing

We do not sell, trade, or rent your personal information. We share information only in these circumstances:

Service Providers

We work with trusted third-party services to provide our infrastructure:

ClerkAuthentication & User Management
PostHogCookieless Product Analytics
SupabaseDatabase Hosting
PaddlePayment Processing
CloudflareContent Delivery & Security
Fly.ioApplication Hosting

Legal Requirements

We may disclose information if required by law or if we believe such action is necessary to:

  • Comply with legal obligations
  • Protect and defend our rights or property
  • Prevent fraud or security issues
  • Protect the safety of users or the public

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit using HTTPS
  • Encryption of data at rest in our databases
  • Regular security reviews and updates
  • Access controls and authentication requirements
Note: However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our Service:

Account Information

Retained while your account is active

Content

Retained until you delete it or close your account

Usage Data

Retained for up to 2 years for service improvement

Deleted Accounts

Removed from our active systems within 30 days of a verified deletion request

Two kinds of records outlive an account deletion: transaction records that our payment provider, Paddle, must retain as merchant of record to meet tax and legal obligations, and residual copies in encrypted database backups, which expire on our backup retention cycle.

7. Your Rights and Choices

You have the following rights regarding your information:

  • Access: Request a copy of your personal information
  • Correction: Update or correct your information
  • Deletion: Request deletion of your account and associated data by email
  • Export: Export your saved articles and data
  • Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at [email protected] from the email address on your account. For deletion requests we send a confirmation email to that address to verify your identity, and we complete the deletion within 30 days of your confirmation.

8. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

10. Chrome Extension

The Gleamr Chrome Extension is an optional companion to the Gleamr web application. It allows you to save articles directly from your browser.

  • Content extraction: The extension injects its extraction script into the current page only when you explicitly click "Save," use the keyboard shortcut, or choose "Save to Gleamr" from the right-click menu — never passively on page load. It extracts article content only in response to that action. No data is collected without your action.
  • Data sent to our servers: When you save an article, we transmit the page URL, article title, extracted text content, author name, and hero image URL to the Gleamr API for storage.
  • Authentication: The extension stores a session token in your browser's local storage (chrome.storage) to keep you signed in.
  • What we do not do: The extension does not collect your browsing history, track pages you visit, run in the background without your action, inject advertisements, or share data with third parties beyond what is described in Section 4.
  • Version identifier: The extension sends its version number with each save request for compatibility purposes.

Contact Us

For questions about this Privacy Policy or our privacy practices, please contact us.