Privacy

Who we are

The controller of the data described here is Sophia Phillipa, the founder of the KeepGlide project, which is not a company yet. Contact: hello@keepglide.com. Contact for data protection: hello@keepglide.com.

What we collect on this website

Only what you type into the purchase form (your email address) or into the waitlist form (your email address).

We use it to send the confirmation link, to issue your license to that address, to send the license file, to send a new link if you ask for one, and to answer questions about your license.

The waitlist uses your email address only to tell you once when the Windows version and the paid licenses of KeepGlide for desktop open. It sends you one email, right after you sign up, with a link to confirm the address; nothing is kept as a sign-up until you open it, and an unconfirmed sign-up is deleted after 24 hours. It stores no IP address and no analytics, and you can ask us to remove you at any time. The form uses Cloudflare Turnstile to check that a person is signing up, under the notice described below.

Legal bases under the LGPD: consent (LGPD art. 7, I) for the waitlist; contract performance (art. 7, V) for your email and your license; legitimate interest (art. 7, IX) for the short in-memory rate limit that fights abuse; legal obligation (art. 7, II) for accounting and tax records.

What we keep, and for how long

• Waitlist (email, language, consent time and, once you confirm, the confirmation time). New sign-ups: we keep your e-mail address for up to 24 months after you join, then delete it. Sign-ups made before 3 November 2026 keep the 12-month term. We no longer ask for a name; sign-ups from before that date may still hold one, deleted with the row. A sign-up you do not confirm within 24 hours is deleted, or earlier if you ask.
• Purchase requests (email and requested major version): deleted 7 days after the request if no purchase follows. Requests tied to an unresolved payment or a refund are kept for 90 days, for manual follow-up.
• Confirmation links: valid for 24 hours and work once.
• Orders (payment reference, status: paid, refunded, chargeback or unmatched): kept for the period required by tax and accounting law.
• Licenses (license ID, major version, email, issue date, status active or revoked, and the signed license file): kept while the major version you bought is supported, so a lost license can be resent.
• License download links: valid for 7 days.
• Payment-partner notifications: kept for 90 days to prevent duplicate processing, then deleted.
• Operational logs: only the event name, route, status code and internal record IDs. No email addresses, tokens, IP addresses or notification contents.

What we never store

The purchase never stores your name, postal address, phone number, card details or device identifiers. We do not store IP addresses. Your IP is used only in memory, as the key of a short rate limit. If the payment email differs from the one you confirmed, we do not keep it. Download and confirmation tokens are stored only as a one-way hash.

IP addresses

Your IP address is used only as the key of an in-memory counter that limits how many requests an address can make in a short time. It is not written to any database or log.

Verification (Cloudflare Turnstile)

The purchase form and the waitlist form use Cloudflare Turnstile to check that a person, not an automated script, sends the request. Your browser loads the check from Cloudflare when you open the form, and the check is governed by Cloudflare's own privacy notice. To run the check, Cloudflare receives your IP address. Our server does not send your IP address to Cloudflare: our verification request sends the check token and our secret only.

Payment and email delivery

Payment is handled by Creem (creem.io), our payment partner, which acts as merchant of record (reseller). The partner collects your payment details under its own privacy notice. We do not see or store your card details.

Confirmation, license and resend emails are sent by our email delivery provider, named here before sales open. The provider receives your address and the message content.

The desktop app

KeepGlide for desktop uses no KeepGlide server except for the opt-in update check, and has no telemetry. It sends no analytics, usage data or your files to KeepGlide or to any third party.

If you connect a cloud storage account, the app talks to that account directly, under your control, and to no one else. Your notes stay on your computer or in that account.

The license file is stored on your computer with owner-only permissions. The app checks it offline and does not contact us to do so. Update checks are opt-in and off by default: the app contacts the update server only if you turn them on or check by hand.

The app runs on Linux (x86_64) only.

Cookies and trackers

This site sets no first-party cookies and uses no browser storage. Two services set their own cookies: Cloudflare Turnstile, which checks the waitlist and acquisition forms for abuse, and, on the staging site only, Cloudflare Access. We use no cookies for tracking, and we show no cookie banner.

Our pages block third-party scripts other than the purchase-form check, including a Cloudflare analytics beacon that the network may inject; the browser blocks that beacon and sends no data. The Turnstile check on the purchase form runs in a Cloudflare frame and may set its own technical cookie there, under Cloudflare's notice.

Your rights

Under Brazil's LGPD you can ask us to confirm what we hold about your email address, to correct it, and to delete it. You may also ask for the other rights in Article 18 of the LGPD. Write to hello@keepglide.com. If you delete your data, we may no longer be able to resend your license.

Changes

We will post changes to this notice here, and tell you by email at least 30 days before material changes take effect.