Privacy Policy
Last updated: June 2026
1. Introduction
Glashaus ("we", "us", "our", or "Company") operates the Glashaus IPFS pinning platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including any related applications, websites, and services that link to this Privacy Policy.
We are committed to protecting your privacy and ensuring you have a positive experience on our platform. Please read this Privacy Policy carefully to understand our privacy practices.
2. Information We Collect
2.1 Information You Provide Directly
- Wallet Information: When you set up a wallet, we may collect your wallet address and associated blockchain identifiers. Private keys are never stored on our servers — they remain on your device.
- Uploaded Content Metadata: File names, sizes, content hashes (CIDs), and upload timestamps for pinned content.
- Custom Domain Information: Domain names and DNS configuration details when you add custom domains to your deployments.
- Communication Data: Any messages, feedback, or support inquiries you send to us.
2.2 Automatically Collected Information
- Usage Analytics: Which features you use, how often, and duration of interactions. This helps us improve the Service.
- Device Information: IP address, browser type, operating system, and referral source.
- Server Logs: API request logs, response times, and error messages for troubleshooting and service optimisation.
- Blockchain Data: Transaction hashes and on-chain activity associated with your wallet (public blockchain records).
2.3 Cookies and Tracking
We use cookies to enhance your experience, remember your preferences, and understand how you use the Service. You can control cookie settings in your browser. Essential cookies cannot be disabled as they are necessary for the Service to function.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, maintain, and improve the Service
- To process payments and verify transactions on blockchain
- To authenticate your identity and prevent fraud
- To generate analytics and usage reports
- To respond to support requests and resolve technical issues
- To send service announcements and important updates
- To comply with legal obligations and enforce our Terms of Service
- To create and publish anonymised aggregate statistics about platform usage
4. Information Sharing and Disclosure
4.1 We Do Not Sell Your Data
Glashaus does not sell, trade, or rent your personal information to third parties for marketing purposes.
4.2 Service Providers
We may share information with service providers who help us operate the Service, such as cloud infrastructure providers, payment processors, and analytics services. These providers are contractually obligated to use your information only to provide services to us.
4.3 Legal Requirements
We may disclose your information if required by law, such as in response to a subpoena, court order, or other legal process. We will provide notice when legally permitted to do so.
4.4 Public Blockchain Data
Wallet addresses and transaction details are recorded on public blockchains and are inherently public. This data is not private and cannot be controlled by us or you.
4.5 Aggregated Analytics
We may publish anonymised, aggregated analytics about platform usage, content popularity, and network statistics. This data cannot identify individuals.
5. Data Security
We implement industry-standard security measures to protect your information, including:
- Encryption in transit (TLS/HTTPS) and at rest (AES-256-GCM for sensitive data)
- Regular security audits and vulnerability assessments
- Access controls limiting who can view personal information
- Server-side validation of all user inputs
- Monitoring for suspicious activity and unauthorised access attempts
However, no security system is impenetrable. While we implement strong protections, we cannot guarantee absolute security of your data.
6. Data Retention
We retain your information for as long as necessary to provide the Service and comply with legal obligations. Specifically:
- Content metadata and analytics are retained as long as your pins are stored
- Transaction logs are retained for financial audit purposes (typically 7 years)
- Server logs are typically retained for 30 days for troubleshooting
- You can request deletion of your account and associated data where legally permitted
7. Your Rights and Choices
Depending on your location, you may have rights regarding your personal information:
- Access: Request a copy of the information we hold about you
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your data (subject to legal requirements)
- Opt-out: Opt out of non-essential communications
- Data Portability: Request export of your data in a structured format
To exercise these rights, contact us at privacy@glashaus.xyz with your request.
8. GDPR and Regional Privacy Laws
8.1 GDPR (European Users)
If you are located in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR). We process your data based on your consent or our legitimate business interests. You have the right to lodge a complaint with your local data protection authority.
8.2 CCPA (California Users)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the sale of personal information (which we do not do).
8.3 Other Jurisdictions
We respect privacy laws in all jurisdictions where we operate. If your local law provides greater privacy protections, those protections will apply to you.
9. Third-Party Services
The Service may contain links to third-party websites and services (such as npm, Discord, Telegram) that are not operated by us. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. Please review their privacy policies separately.
10. Children's Privacy
The Service is intended for business users and developers. We do not knowingly collect information from children under 13. If we become aware that we have collected information from a child under 13, we will delete it immediately. Parents who believe their child has provided information to us should contact us immediately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy here and updating the "Last updated" date. Your continued use of the Service constitutes your acceptance of the updated Privacy Policy.
12. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us: