Privacy Policy — GlyphShift

Last updated: 16 October 2026

Who we are. GlyphShift (glyphshift.app) is operated by Alex Chernysh, an individual based in Israel ("we"). For anything about your data, write to [email protected].

This policy explains what we collect when you visit glyphshift.app or join the waitlist. We keep it short on purpose. There is no selling of personal data, no advertising profiles, and no data brokers. Sections about buying and using the app will be added when GlyphShift goes on sale.

1. Waitlist

When you join the waitlist we collect your email address, the time you signed up, your language choice, and a one-time confirmation token we send to your email (double opt-in). Until you click the confirmation link, your address is stored as "unconfirmed" and we send nothing else.

Why: to tell you when GlyphShift launches, send beta invitations, and occasional product updates — nothing else.
Legal basis: your consent (GDPR art. 6(1)(a)); under Israeli law, your informed consent to the purpose stated here (Privacy Protection Law §11). Giving us your email is voluntary; without it we cannot notify you.
How long: until launch plus 12 months, or until you unsubscribe — whichever comes first. Unconfirmed addresses are deleted after 30 days.
Unsubscribe: every email has a one-click link that deletes your address; or email [email protected].

2. Visiting the site

The site is served by Cloudflare. Cloudflare's edge logs standard request data (IP address, browser type, requested page, timestamp) for security and to keep the service running; we see only aggregated, non-identifying statistics. We do not use advertising cookies or third-party trackers. The site stores your language choice in your browser only.

3. Where your data is processed

Provider	What	Where	Safeguard
Cloudflare, Inc.	hosting, waitlist storage, edge logs	EU / US	EU-US Data Privacy Framework; Standard Contractual Clauses
Resend, Inc.	email delivery	US	Standard Contractual Clauses (Resend DPA)

We do not transfer your data to anyone else, except where the law requires it.

4. Your rights

You can ask us to access, correct, delete, or export your data, to restrict processing, or to withdraw consent at any time — email [email protected]; we answer within 30 days. If you are in the EU/EEA or UK you may also complain to your local data-protection authority; in Israel, to the Privacy Protection Authority (הרשות להגנת הפרטיות).

5. Security

Data in transit is encrypted (HTTPS/TLS). Waitlist confirmation links are signed and expire. Access to provider dashboards is limited to the operator and protected by multi-factor authentication.

6. Children

GlyphShift is not directed at children under 16, and we do not knowingly collect their data.

7. Changes

We will post any change here with a new "last updated" date. Material changes affecting waitlist members will be announced by email.

Contact: [email protected] · Alex Chernysh, Israel.