Privacy Policy

Glopzi is a software-as-a-service product operated from Mexico. You can reach us through our contact page.

• Account data: email address (required for license delivery and account recovery).
• Payment data: handled entirely by Lemon Squeezy. We receive only metadata (plan, subscription status, customer ID), never card numbers.
• Usage data: the domain names where your license is activated.
• Support data: contents of messages you send us.
• Logs: IP addresses and request timestamps, retained for security and debugging (maximum 30 days).

• To provide and operate the Service (performance of contract).
• To process payments and comply with tax obligations (legal obligation).
• To prevent fraud and abuse (legitimate interest).
• To send service-related emails (performance of contract).
• To send product updates and offers if you opted in at signup (consent). You can unsubscribe at any time via the link in any marketing email or by contacting us. Unsubscribing does not affect transactional emails (license keys, receipts, support replies).

• Lemon Squeezy (payments, as Merchant of Record, US): processes payment data under their own privacy policy.
• Supabase (database + hosted functions, US/EU): stores account and license data.
• Resend (transactional email, US): delivers service emails like license keys and receipts.
• Cloudflare R2 (asset storage): stores animation bundles.
• Vercel (editor hosting): hosts the editor UI you use.
• Google Tag Manager and Google Analytics (analytics, US): used on our public landing pages (glopzi.com) to understand traffic and improve the site. You can opt out using the Google Analytics Opt-out Browser Add-on.

Your data may be processed outside your country. We rely on standard contractual clauses and our providers’ compliance frameworks.

The public landing pages (glopzi.com) use Google Tag Manager to load analytics scripts (Google Analytics), which set first-party analytics cookies. These help us measure traffic and improve the site.

The editor and dashboard use essential cookies only (authentication, session). We do not use advertising or cross-site tracking cookies anywhere in the product.

Account and license data are kept for the life of your account plus 12 months after cancellation (for fiscal and tax compliance). Log data is deleted after 30 days.

Depending on your jurisdiction (EU, UK, California, Brazil, and others), you may have the right to:

• Access your data.
• Correct inaccurate data.
• Delete your data.
• Port your data to another provider.
• Object to processing.
• Withdraw consent.

To exercise any right, send a message through our contact page with the subject [Privacy Request]. We respond within 30 days.

Glopzi is not intended for children under 16. We do not knowingly collect data from children.

We may update this policy. Material changes will be communicated by email.

When a Glopzi customer embeds our runtime on their website, visitors of that website download runtime assets from our CDN. In the course of delivering those assets, our infrastructure providers (such as Cloudflare and Vercel) may log technical metadata including IP addresses, user agents, and timestamps for security, abuse prevention, and debugging purposes.

Glopzi does not identify, track across sites, profile, or market to those visitors. Our customer acts as the data controller for the visitors of their own site and is responsible for obtaining any consents required under applicable law. A Data Processing Agreement (DPA) is available on request for customers that require one for their own compliance needs.

The Glopzi browser extension lets you open the Glopzi editor on a website you are viewing. This section describes what it does with data, and is the disclosure required by the Chrome Web Store.

• Site access is per site and on your request.The extension asks for permission to a website only when you click “Edit this site” on that site, and only for that site’s address. It is not granted access to your browsing at large, and it does nothing on sites you have not opened it on.
• The extension itself sends nothing anywhere. It makes no network requests of its own. It reads the structure of the page you are editing so you can point at an element, and that reading happens entirely in your browser.
• No browsing history, no tracking, no analytics inside the extension. It does not record which sites you visit, and it does not build a profile of you.
• What leaves your browser, precisely.Only the animations you deliberately save, and saving requires an account and a website registered to it. What we then store, per element you chose to animate, is: a CSS selector describing where it sits, a short identifier derived from that element’s own visible text (up to 30 characters, so the item is recognisable to you later), the page-builder’s own id for it when the site has one, and the address of the page. We do not capture the page’s content, images, form fields or a copy of the page. Work you create without an account is never sent anywhere: it exists only in that browser tab and is gone when you close it.
• Why the extension modifies response headers. To show a site inside the editor, the extension removes the headers that prevent a site from being displayed in a frame, and it does so only for the one site you are editing, only while that editing session is open, and only for requests the Glopzi editor itself makes. No such rule exists when you are not editing.
• No sale of data. We do not sell or transfer your data to third parties, and we do not use it for advertising, creditworthiness or lending.

Everything else in this policy (retention, your rights, third-party processors, international transfers) applies to the extension in the same way it applies to the rest of Glopzi.

Reach us through our contact page. We respond within 2 business days.