Privacy

If you have an account: your email address, your name and profile image if you sign in with a social account, and any handle, display name or avatar you set. We never receive or store a password.

If you watch a video: which video and product, what happened (play, pause, hover, click), when in the video it happened, an anonymous session identifier, the page the video was embedded on, a coarse device type, and where on the picture a click landed.

We also record where your pointer moved over the picture: its position a few times a second while it is over the video or photo, up to sixty points per visit, and how long it rested on each part of the frame. That is what draws a creator’s heat map. It stops at the edge of the picture, so nothing outside it is recorded, and it is only a position: we do not record your keystrokes, anything you type into a form, the text of any page, or a recording of your screen. We do not store your IP address and we do not know your name.

If your browser sends the Global Privacy Control signal, or Do Not Track, we do not record pointer movement at all. Plays, clicks and store visits still count, because those are a creator’s record of what their own content did.

To run the product, to show creators how their videos performed, and to send a viewer to the right place when they click. We do not sell your data, share it with advertisers, build advertising profiles, or use it to train machine-learning models.

Three, all first-party, no advertising and no third-party trackers. A sign-in cookie if you have an account. glw_last, set when a viewer clicks through to a product, which expires after 30 days. And glw_vid, a random identifier with no name attached to it, kept in your browser’s storage and as a cookie for a year, which is what lets a creator tell a returning viewer from a new one. Clearing your site data removes all three, and private browsing never keeps them.

Only the providers that run the service, and only what each one needs to do its job: our hosting and content delivery provider, our database provider, our media storage provider, our video processing provider, and our email provider. If you use a social sign-in button, the account provider you chose. If you subscribe to a paid plan, our payment processor, and your card details go to it directly and never touch our servers. Every one of them is bound to use your data only on our instructions. We will name any of them on request through the contact form.

Glow had a store integration until August 2026. It has been withdrawn. We receive no order, customer or catalogue data from any store platform.

• Account details, videos and their media: until you delete them.
• Viewing and click events: 25 months.
• Commission records from the withdrawn store integration: 7 years, as financial records. They contain no customer names, addresses or contact details.

You can delete your account, your videos and their media at any time from the account page. To request a copy of your data or its deletion, write to us through the contact form and we will respond within 30 days. Depending on where you live you may also have the right to correct your data, object to how we use it, or complain to a data protection authority.

If we change how your data is handled, account holders are emailed before it takes effect.