Privacy Policy

We collect only what we need to run the Service:

• Account information — your email address and a securely hashed password. Authentication is handled by Convex Auth; we store password hashes, never plaintext passwords.
• Saved prop data — the props, layouts, skins, contact names, and other configuration you create and save.
• Uploaded media — images and other files you upload to use in your props.
• Billing metadata — for paid plans, we and our payment processor Stripe process your subscription status, plan, and billing metadata. Your full payment-card details go directly to Stripe; we do not store them.
• Collaboration data — when you share a prop or project, we store the sharing relationship so collaborators can access what you shared.
• Basic usage analytics — aggregate, privacy-friendly measurements of how the Service is used (for example, page views and performance), so we can keep it working well.

• To provide, maintain, and secure the Service and your account.
• To store and sync your saved props and media, and to enable collaboration and sharing.
• To process subscriptions and payments through Stripe.
• To send essential Service email (such as account, security, and billing messages) via our email provider, Resend.
• To understand aggregate usage and improve performance and reliability.
• To comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use your saved props or uploaded media for advertising.

We rely on a small set of trusted service providers to run Glass Double. Each processes data only to provide their service to us:

• Convex — backend hosting, database, authentication, and file storage for your account, props, and media.
• Vercel — web application hosting and delivery.
• Stripe — payment processing and subscription billing.
• Resend — transactional and account email delivery.
• Vercel Analytics — privacy-friendly, aggregate usage analytics.
• Google Analytics — aggregate usage and traffic analytics (Google Analytics 4), loaded only after you accept analytics cookies.
• Telnyx — SMS delivery for App-less mode (only when you run a live scene). Processes the managed sending number and the recipient phone number you provide.

These providers have their own privacy practices. We may also disclose information if required by law or to protect the rights, safety, and security of Glass Double and its users.

To keep you signed in, our authentication provider (Convex Auth) stores session tokens in your browser’s local storage rather than in cookies; these are strictly necessary to operate the Service. We use Vercel Analytics for privacy-friendly, aggregate measurement, which does not use cookies. Google Analytics 4 — which does set its own cookies — loads only after you accept analytics cookies in the consent banner shown on your first visit; until you accept, it is not loaded and sets no cookies, and you can decline or change your choice at any time without affecting core functionality. We do not use cross-site advertising trackers, and we do not use analytics to build advertising profiles of you.

• You can delete individual props and uploaded media at any time from within the Service.
• We keep your account data for as long as your account is active and as needed to provide the Service.
• You can permanently delete your entire account yourself at any time from your Account page (“Delete account”) — on the web and in our iOS and Android apps. Deleting cancels any active subscription, signs out every device, and removes your props, projects, uploaded media, published skins, and team data; it completes within about an hour. You can also ask us to do it at hello@overpunch.ca. We keep only what we’re required to keep for legal, tax, or security reasons (for example, payment records held by our payment processor). Residual copies may persist in backups until they age out on our normal retention cycle.

We take reasonable technical and organizational measures to protect your data, including encrypted transport, hashed passwords, and reliance on reputable infrastructure providers. No online service can be perfectly secure, but we work to protect your information and to address issues promptly if they arise.

Shared prop media works like an unlisted link. When you hand off a prop for on-set playback, the link carries the prop’s media so it plays on a device that isn’t signed in. Anyone who has that link (or the prop’s media reference) can view its media, so treat prop links like unlisted video links and share them only with people you trust. Uploading media is limited to your account, and only you can delete your uploaded files.

Glass Double is a professional tool intended for users aged 16 and over, and is not directed at children. We do not knowingly collect personal information from anyone under 16 (or the age of digital consent in your jurisdiction, if higher). If you believe someone under that age has provided us information, contact us at hello@overpunch.ca and we’ll delete it.

Glass Double and its providers may process and store data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers. By using the Service, you understand your information may be processed in these locations.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can:

• Access and update much of your data directly in the Service.
• Export or request a copy of your data by contacting us.
• Request deletion of your account and data as described above.

To exercise any of these rights, email hello@overpunch.ca. We aim to respond within 30 days, and we will not discriminate against you for exercising them. We do not sell or share your personal information for cross-context behavioral advertising.

We may update this Privacy Policy from time to time. When we make material changes, we’ll update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the revised policy.

Questions about your privacy or this policy? Reach us at hello@overpunch.ca.