1. Data We Collect

We collect personal information from you for a variety of reasons. 'Personal information' is any information about a user which could, alone or together with other information, personally identify that user, or otherwise be reasonably linked or connected with that user. Information such as a username and password, an email address, a real name, an Internet protocol (IP) address, and a photograph are examples of 'personal information.'

Personal information does not include aggregated, non-personally identifying information that does not identify a user or cannot otherwise be reasonably linked or connected with that user (See Section 4 for further detail). We may use such aggregated, non-personally identifying information for research purposes and to operate, analyze, improve, and optimize our Services.

We do not intentionally collect 'Sensitive Personal Information,' such as personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data (where processed to uniquely identify someone), and/or data concerning health or data concerning a natural person’s sex life or sexual orientation. If you choose to store any Sensitive Personal Information on our servers, you are responsible for complying with any regulatory controls regarding that data.

Glitch also does not knowingly collect information from, or direct any of our content specifically to, children under the age of 13. Children under the age of 13 are not permitted to use the Services. If we learn or have reason to suspect that a user is under the age of 13, we will have to close their account. For further information, please see Section 11 and our Terms of Service.

The table below further describes the different types of information we collect about you (personal and otherwise), why we use that information, and where we received that information.

The following chart provides additional information about why and how Glitch collects and uses your information.

2. Cookies and Online Analytics

We use a number of third-party web analytics and service providers (such as Google Analytics, Amplitude, and Segment) to compile statistical reports on activity, to assist us in auditing, to help us improve our content and Services performance, to aid in fraud prevention, and to provide certain features to you.

We also use a variety of online tracking and analytics tools (e.g., cookies, flash cookies, pixel tags, and HTML5) to collect and analyze information as you use the Services. By understanding and remembering your particular browsing and usage preferences, these technologies allow us to offer you a more tailored user experience.

The types of tracking and analytics tools we and our service providers use are:

• Cookies.

  'Cookies' are small data files stored on your computer or device to collect information about your use of the Services. Cookies allow us to enhance your experience on the Services by enabling us to recognize you as the same user who used our Services in the past (e.g., by storing your username), by allowing us to connect your use of the Services to other information we have about you, and by allowing us to use general usage and aggregated statistical information to personalize your user experience. Most browsers can be set to detect cookies, and most browsers give you an opportunity to reject them. But refusing, blocking, disabling, or managing cookies may limit your use of our Services or features. Click to learn more about the use of cookies, including how to manage or delete them.

• Local Shared Objects or Flash Cookies.

  'Local shared objects,' or 'flash cookies,' are similar to cookies. They can be used to store user preferences, save data, and/or track your activity on the Services. Local shared objects may be stored on your computer or device using a media player or other software. Although local shared objects operate much like cookies, they cannot be managed in the same way. Depending on how local shared objects are enabled on your computer or device, you may be able to manage them using software settings. Click for more information on managing local shared objects.

• Pixel Tags.

  A 'pixel tag' (also known as a 'clear GIF' or 'web beacon') is a tiny image – typically just one-pixel – that can be placed on a web page or in electronic communications. Pixel tags help us measure the effectiveness of our content by letting us know whether you have opened one of our emails or have visited one of our web pages. Click for more information on managing web beacons.

3. How We Share Your Data

The chart below explains when we may share your Personal Information with third parties and the categories of information that will be shared with those third parties.

4. Aggregate/De-Identified Information

We may aggregate and/or de-identify any information collected through the Services so that such information can no longer be linked to you or your device ('Aggregate/De-Identified Information'). We may use Aggregate/De-Identified Information for any purpose, including research and marketing purposes, and we may also share this data with any third parties, including advertisers, promotional partners, and sponsors, in our discretion.

5. Notice About Use of Our Forums and Features

Certain features of our Services make it possible for you to share comments publicly and privately with other users, such as through collaborating on projects and collections, public forums, review features, and message boards. You should be aware that any information you provide or post in these ways may be read, collected, and used by others who access them. While we do not have an obligation to monitor the content of messages sent using our Services, we reserve the right to, in our discretion. We encourage you to be cautious about the information you submit (e.g., choose a username that does not disclose your personal identity). Whenever you post something in our Services, social media, and any other third party platforms we control, it may be impossible to remove all instances of the posted information. You may be required to register with a third-party application to post a comment.

6. Your Choices and Rights

If you are a registered user, you may be able to access and delete certain information associated with your account by logging into the Services and deleting projects or content. Registered and unregistered users can access and delete cookies through their web browser settings.

If you want to delete your account, you can do so from your membership page or by emailing us at support@glitch.com and providing proof of authority over the account. What constitutes 'proof of authority' will vary depending on the circumstances, but generally will require sufficient identifying information so that we can be confident you are the account owner. Deleting your account does not remove all the content you have published from our systems, and we may continue to use the content in accordance with our Terms of Service. In addition, given the nature of sharing on the Services, the public activity on your account prior to deletion may remain stored on our servers and accessible to the public. Even after you delete your account, there may be records of any contributions you have made to projects created by others.

You may also have certain rights with respect to your information as further described in this Section, in addition to any rights discussed elsewhere in this Privacy Statement. Please note that your rights and choices may vary depending upon your location.

If you are a California resident, the CCPA allows you to make certain requests about your personal information. Specifically, the CCPA allows you to request us to:

• Inform you about the categories of personal information we collect or disclose about you; the categories of sources of such information; the business or commercial purpose for collecting your personal information; and the categories of third parties with whom we share/disclose personal information.
• Provide you with access to and/or a copy of certain personal information we hold about you.
• Delete certain personal information we have about you.
• Provide you with information about the financial incentives that we offer to you, if any.

The CCPA further provides you with the right to not be discriminated against (as provided for in applicable law) for exercising your rights.

Please note that certain information may be exempt from such requests under California law. For example, we need certain information in order to provide the Service to you or to comply with a legal obligation. We also will take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name, email address, phone number, or other information. You are also permitted to designate an authorized agent to submit certain requests on your behalf. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity before processing the authorized agent’s request. In some circumstances if you still ask us to delete your information, you may no longer be able to access or use our Services. If you would like further information regarding your legal rights under California law or would like to exercise any of them, please contact us at ccparightsrequest@glitch.com.

California residents may opt out of the 'sale' of their personal information. Although, we do not believe we engage in the sale of personal information as we currently understand such terms to be defined under applicable law and relevant regulatory guidance, we do share information as described in this Policy Statement, including with certain analytics and advertising partners who perform certain services like analyzing our Services and showing you ads for Glitch. You can choose to limit the information shared with our analytics and advertising partners by following the steps described in the '‘Cookies’ Information' section of this Policy Statement.

We do not engage in such activity; however, if you are a Nevada resident who has purchased or leased goods or services from us, you may submit a request to opt out of the sale of your covered information under Nevada law by emailing us at nevadarequests@glitch.com. Please note we will take reasonable steps to verify your identity and the authenticity of the request.

7. International Users

Our Services are hosted in the United States and generally are intended for United States visitors. Glitch may subcontract the processing of your data to, or share your data with, trusted service providers and trusted business partners located in countries other than your country of residence. These third parties are helping us provide the Services to you. By providing us with your information, you acknowledge the transfer, storage, and/or use of your information by these third parties.

If you live in the European Economic Area ('EEA'), please note that if we provide any information about you to any non-EEA members of our group or third-party information processors, we will take appropriate measures to ensure that these companies protect your information adequately and in accordance with this Privacy Statement. These measures include signing Standard Contractual Clauses in accordance with EU and other data protection laws. Email us at support@glitch.com for more information about how these transfers work.

Residents of the EEA, and some other jurisdictions outside the United States, have certain legal rights with respect to the personal data we hold about them. These residents may:

• request that we provide access to personal data we hold about them (including, in some cases, in portable form)
• request that we rectify such data
• request that we delete certain personal data
• object to our uses or disclosures of personal data or exercise legal rights to withdraw consent

Please note that some of your information may be exempt from the above requests. For example, your personal information may be exempt if we need to keep processing your information to perform our contractual obligations or for legal compliance.

To exercise any of the above rights (or any other rights under applicable law), please email us at gdpr@glitch.com.

In addition to the rights above, you have the right to lodge a complaint with the relevant data protection supervisory authority in the country where you are based. Alternatively, you may seek a remedy through local courts if you believe your rights have been breached. However, we encourage you to contact us first, and we will do our very best to resolve your concern.

Our legal bases for processing your information

To the extent that our processing of your Personal Information is subject to certain international laws (including, but not limited to, the European Union’s General Data Protection Regulation (GDPR)), Glitch is required to notify you about the legal basis on which we process your Personal Information. The legal bases for using your information as set out in this Privacy Statement are as follows:

• Contract Performance. We require your information to perform our obligations under our contract with you, such as to comply with the Terms of Service. We also need to collect and process your transactional/financial information in order to perform our obligations under our paid account contract with you.
• Consent. We rely on your consent, implied or express, to use your Personal Information when you fill out the information in your user profile; when you decide to participate in a research project, beta program, or survey; and for marketing communications, where applicable. The processing of your Personal Information under this legal basis is entirely optional, and you have the ability to access, modify, and delete your information at any time. You may withdraw your consent at any time.
• Legitimate Interests. The remainder of the processing of Personal Information we perform is necessary for the purposes of our legitimate interest, for example, to ensure the security of our Services, operate our business, respond to your questions, engage in certain marketing, make and receive payments, prevent fraud, conduct analysis, improve our platform or services, comply with legal obligations, enforce our legal terms, engage in a business change (e.g., sale, merger), to know the individual to whom we are providing access to the Services, and to create anonymized data.

If you would like to request deletion of data we process on the basis of consent, or if you object to our processing of your Personal Information, please email us at gdpr@glitch.com.

8. How We Protect Your Data and Our Services

We take measures to protect your information against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure, and access. However, no method of transmission over the internet, and no means of electronic or physical storage, is absolutely secure. By using our Services, you acknowledge and accept that we cannot guarantee the security of your information and that use of our Services is at your own risk. You are responsible for keeping your account information—and especially your login information—confidential. We ask you not to share your login credentials with anyone.

When you sign up for an account, you may be required to establish a username and password. If you create an account with us, you are responsible for maintaining the confidentiality of your account password and for any activity that occurs under your account. We are not responsible for any loss or damage arising from your failure to maintain the confidentiality of your password.

If you use messaging features that allow you to interact with other users directly through our Services, please note that these communications are not encrypted and, for security purposes, you should not include any passwords, social security numbers, payment card information, or other sensitive information in such communications.

We have implemented the Invisible reCAPTCHA on our Website. Your use of the Invisible reCAPTCHA is subject to the Google Privacy Policy and Terms of Use.

9. Retention of Your Information

We store and maintain your information for the purposes for which it is processed by us. The length of time for which we retain information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws.

10. Third-Party Links and Features

The Services contain links to third-party services, and you may also integrate our Services with third-party services. For example, you may click a link within a project that takes you to a third-party website. If you choose to use these third-party services or features, you may disclose your information not just to those third parties but also to their users and the public more generally, depending on how their services function. Glitch is not responsible for the content or practices of such third-party services. The collection, use, and disclosure of your information will be subject to the privacy policies of the third-party services, and not this Privacy Statement. We urge you to read the privacy and security policies of these third parties.

You may be able to use third party login information to log into our Services, and you may be able to publish comments and any other activity on our Services to a third party service, such as a social networking, search, sharing, and other service delivered by a third party. We are not responsible for the sharing, posting, commenting, or other content and information-gathering practices on any third party service. Please review the third party service’s terms of service and privacy policies carefully before using their services and connecting to our Services.

11. Children's Privacy

The Services are not intended for children under 13 years of age, and we do not knowingly collect, maintain, or use personal Information from children under 13 years of age. We will take reasonable steps to delete Personal Information (as defined by the United States Children’s Online Privacy Protection Act) as soon as reasonably possible if we learn that we have inadvertently collected it from children under the age of 13 without parental consent.

If you learn that your child has provided us with Personal Information without your consent, you may alert us at support@glitch.com. If we learn that we have collected any Personal Information from children under 13, we will promptly take steps to delete such information and terminate the child’s account.

12. Changes to our Privacy Statement

From time to time, we may need to change our Privacy Statement, and we can do this at any time. We will notify you of any material changes to our Privacy Statement through the Services at least 30 days prior to the change taking effect by posting a notice on our home page or by sending you an email to the primary address listed in your Glitch account. Also, any revisions to our Privacy Statement will be accessible through the Services, so you should review our Privacy Statement periodically. You can know if our Privacy Statement has changed since the last time you reviewed it by checking the 'Effective Date' at the beginning of the Privacy Statement. By continuing to use the Services, you are confirming that you have read and understood the latest version of this Privacy Statement.

13. Contact Information

If you have any questions about this Privacy Statement, please email us at support@glitch.com or contact us through our Help Page or Support Page. We care about your privacy so DO NOT send us your credit card information and/or other sensitive information. If we need this type of information from you, we will ask you for it through more secure channels.