Privacy

Draft · last changed 13 October 2026

Glance is a small thing with a short list. Here is everything we hold about you, why, and what we never see.

Who we are

Glance, at glancehere.com. Questions about this page: hello@glancehere.com.

What we hold, and why

Your account

You sign in with Google, X or Apple. We keep which provider you used, the account id that provider gives us, and the email address and name it shares. That is how we know it's you next time, and how we keep it to one live account per person. We don't get your password; we never see it.

We keep your date of birth. Other people only ever see your age in whole years.

Glance is invite-only. We keep your invite code, who invited you, and who you've invited. That link stays: if someone you invited is reported for something serious, the report can travel up to you.

Your answers and profile

Your ten answers, your prompts, basics, interests and bio, and your filters. "I don't know" is an answer and is stored as one. None of this is visible to another person until the two of you have met and scanned.

Photos, ID and selfie

Profile photos are looked at by a human before anyone else sees them; they have to show your face and match your ID.

Before her first broadcast, a woman scans her ID and takes a selfie. A human compares the two. The ID images are deleted after the check; what remains is the result: a yes, or a no.

Location

We use your location only while something needs it: while her broadcast is live, and while he is asking for nearby broadcasts. Men never receive her coordinates. They receive a distance and a direction, rounded, and only inside the radius she chose. We check coordinates for plausibility (a phone can't teleport) and reject ones that don't make sense.

"Online now" counts are built on a coarse grid and are never shown for fewer than five people, so a count can't point at a person.

Feedback you send us never includes your location.

Chats

A chat only opens when he scans her code in person. The code carries a fresh key; both phones derive the chat key from it locally. Our servers store public keys and encrypted messages and nothing else. We cannot read your chats, and we have no way to recover them if you lose the phone that holds the key.

If either of you turns on disappearing messages, messages are deleted 24 hours after they are read. Deleting a chat deletes it for both sides.

Reports and moderation

Reports you make and reports made about you are read by a human. We keep the outcome: a warning, a suspension or a ban, and the reason. Those outcomes follow you if you delete your account and sign up again with the same identity.

Notifications

If you allow notifications on your phone, we keep the device token that lets us send them, for example when someone is within a few metres of you. Turn notifications off and we stop.

Payments

On iPhone you pay through the App Store; on the web you pay by card through Stripe. We never see your card number. We keep what we need to know what you've bought and until when: the product, the dates, and the provider's reference for the purchase.

Feedback

We attach the screen you were on and your app version. Never your location.

What we don't do

• No ads, and we don't sell or share your data with anyone for marketing.
• No analytics scripts or trackers on this website.
• No reading your chats. We can't; that's the point of the key exchange.
• No location history beyond what a live broadcast needs. We don't build a trail of where you've been.

Who we share with

Your sign-in provider (Google, X or Apple) knows you signed in to Glance. Apple and Stripe process payments. Apple delivers notifications to iPhones. Cloudflare serves this website. Nobody else gets your data, except where the law requires it.

How long we keep things

For as long as your account exists, except the things above that are deleted sooner: ID images after the check, disappearing messages 24 hours after they are read, QR keys after 60 seconds, a broadcast when it ends.

Deleting removes your answers, photos, invites and every chat key. Broadcasts stop immediately. There's no undo, and no "we miss you" email.

Moderation outcomes are the one thing deletion doesn't erase.

Your choices

• Whether your name and photo are shown is a switch on every broadcast.
• Disappearing messages, blocking and reporting live inside every chat.
• Every answer and every profile field can be changed, hidden or set to "I don't know".
• Delete your account from Settings at any time.

Changes

If this page changes in a way that matters, we'll say so in the app before it takes effect.