Privacy Policy

1. Personal Information Collection

Glowi.es collects only the minimal data necessary to provide our service. This includes:

• Username: Your chosen username for logging in.
• Domain Selection: The domain you choose (e.g., Glowi.es).
• Password Hash: Your password, hashed using bcrypt for maximum security. We never store plain-text passwords.
• Account Creation Date: The date your account was created.

2. Technical Data

We handle technical data with extreme care for your privacy:

• IP Addresses: IP addresses are stored in memory only and are wiped after 1 minute of inactivity. They are never logged to disk.
• Session Data: Necessary session information (e.g., session tokens) is stored to maintain your login state, expounded upon in our documentation.
• Server Logs: Minimal anonymized server logs are kept for debugging and performance monitoring, containing no personally identifiable information.
• Email Content: All content is end-to-end encrypted and stored in a zero-knowledge architecture. We cannot access or decrypt your data.

3. Data We Do NOT Collect

We explicitly do NOT collect the following:

• Real names or personal identification
• Phone numbers or alternate contact information
• Payment information (we accept only anonymous cryptocurrency donations)
• Location data beyond general country-level IP resolution (not logged)
• Browser fingerprints or device identifiers
• Any data that could be used to identify you personally beyond your chosen username and hashed password.

4. Data Retention

Account data is retained only as long as the account remains active. Users may delete their accounts at any time through the dashboard, resulting in immediate and irreversible data deletion. Inactive accounts may be subject to deletion after extended periods of non-use, as outlined in our Terms and Conditions.