Privacy Policy

glassbottles (“we”, “us”, “the service”) is an anonymous message-in-a-bottle app. We keep the amount of personal data we collect to the minimum needed to run the service, and we never sell it. This policy explains what we collect, why, and the choices you have.

Information we collect

Account information. When you create an account we store your email address and an encrypted password, or — if you sign in with Google — the basic profile information Google shares (email and account identifier). Authentication is handled by Supabase on our behalf.

Message content. The messages you write are stored so they can be delivered to another user. Messages are exchanged anonymously: the person who receives your bottle does not see your identity, and you do not see theirs.

Preferences and technical data. We store a small amount of data needed to make the app work correctly, such as your time zone (to deliver your daily bottle at the right moment) and, if you enable them, push-notification subscription details.

Usage analytics. We use Vercel Analytics and Speed Insights to understand aggregate traffic and performance. These do not use cookies to track you across other sites.

We also use Google Analytics to learn how people find and use the site (for example, which pages are visited and from which country). Google Analytics sets cookies and collects your IP address, device and browser details, and pages viewed. It never sees your messages. You can opt out with the Google Analytics opt-out browser add-on or by blocking cookies in your browser. It only loads after you accept it in the cookie banner; you can change your choice any time via cookie settings.

How we use your information

We use your information to operate the service: to authenticate you, deliver and receive bottles, send notifications you have opted into, prevent abuse, and keep the app fast and reliable. We do not use your messages to build advertising profiles.

To keep the sea safe, the text of each bottle — never your name, email or account — is checked by an automated AI classifier before it is delivered, to catch contact details, cruelty, sexual content and spam, and to offer support if a bottle reads like you may be in danger. The check runs through OpenRouter, which we instruct to use only AI providers that neither store the text nor train on it; it is processed only to return that check.

Anonymity between users

The service is designed so that senders and recipients cannot identify one another through the app. Your email address and account details are never shown to other users. Please remember that anything you choose to write inside a message could reveal who you are — avoid sharing personal contact details you don’t want a stranger to have.

Sharing and disclosure

We do not sell your personal data. We share it only with the infrastructure providers that run the service on our behalf — such as Supabase (database and authentication), Vercel (hosting and analytics), Resend (email notifications), OpenRouter and the AI provider it routes to (the automated safety check on each bottle, and Keepers’ writing sparks, which send only the mood you picked), and Google (analytics) — and, if you become a Keeper, Dodo Payments (our merchant of record, which receives your email and payment details to bill you; we never see your card and keep only your membership status) — and only to the extent needed to operate glassbottles. We may disclose information if required by law or to protect the safety and rights of our users.

Data retention

We keep your account information for as long as your account is active. You can delete your account at any time, after which we remove your personal data, your inbox, and any bottles still drifting. Bottles you sent that were already delivered stay in the recipient’s inbox, unlinked from you — we keep no record of who wrote them. We may retain limited records where required to comply with legal obligations or prevent abuse.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. To make a request, contact us at hello@glassbottles.app.

Children

glassbottles is not intended for anyone under 13 (or the minimum age required in your country). We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “last updated” date above. Significant changes will be communicated within the app.

Contact

Questions about privacy? Email us at hello@glassbottles.app. See also our Terms & Conditions.