Privacy Policy

1. Who we are

GLIMMY.XYZ

[Glimmy] provides an application that allows users to create and publish a personal link page, optionally connected to blockchain technologies such as ENS and IPFS.

2. What data we process

We apply the principle of data minimization. This means we only process data that is strictly necessary to provide the service.

We do not process:

Names
Physical addresses
Email addresses (unless voluntarily provided)
Payment details
IP addresses in our own database

Data we do process

a. Technical publication data

When publishing a page, we process:

A chosen URL slug (e.g. bernhard)
An IPFS Content Identifier (CID)
Technical status information (e.g. whether publication was completed)

This data does not contain personal data.

b. Blockchain data (optional)

If you choose to use Web3 functionality, we may process:

A wallet address
An ENS name

These data points are pseudonymous and are not linked by us to a real-world identity.

3. Payments

Payments are handled entirely by external payment providers:

Stripe (for standard payments such as credit card and iDEAL)
Blockchain transactions via the user's own wallet (if applicable)

We:

Do not receive payment details
Have no access to credit card or bank information
Do not store payment information

The payment provider acts as an independent data controller for payment-related data.

4. Content storage

User-generated content is stored via:

Pinata (IPFS)

Published content is publicly accessible via the chosen URL or ENS name. Users are solely responsible for the content they publish.

5. Cookies and tracking

We use:

No tracking cookies
No advertising cookies
No user profiling
No third-party analytics that identify users

We may use functional cookies strictly necessary for the operation of the application.

6. Sharing data with third parties

We do not share personal data with third parties.

We do rely on technical service providers to operate the application, including:

Stripe (payments)
Vercel (application hosting)
Pinata / IPFS (content storage)

These providers process data only as required to deliver their services.

7. Data retention

Technical publication data is retained for as long as the page remains active.
We do not store personal data that requires deletion or long-term retention.

8. Your rights

Because we process little to no personal data, many rights under the GDPR (such as access or deletion of personal data) are not applicable in practice.

If you have questions about this policy or data processing, you may contact us via the contact details on our website.

9. Security

We take appropriate technical and organizational measures to protect our services, including:

Secure connections (HTTPS)
No storage of sensitive data
Use of reputable third-party service providers

10. Changes to this policy

This Privacy Policy may be updated if the service changes. The most current version will always be available on our website.

11. Contact

If you have questions about this Privacy Policy, please contact us via:

Email: glimmy@tuta.com