Legal

Privacy policy

Effective November 10, 2026

myglaze.ai is run by Gavin Cruz ("we"), in Washington, United States. This policy covers the myglaze.ai website and the myglaze.ai browser extension. Questions, and requests about your data, go to privacy@myglaze.ai.

The short version

• The extension changes how ChatGPT and Claude look. It never reads, collects or sends what you write or what the AI answers.
• We keep what an account needs: your email, your name, how you sign in, and your library.
• We don't sell your data, show ads or use advertising trackers.
• You can download everything we hold about you, and delete your account, from the Account page.

The extension

The extension runs on chatgpt.com and claude.ai only to restyle the page: colors, fonts, background art and effects. Your conversations stay on those sites; the extension doesn't read them, store them or send them anywhere.

Its settings (which theme you picked for each site, and whether it's on) are stored in your browser. When you're signed in on the myglaze.ai website, the extension receives an access token for your account and uses it to download your library of themes from myglaze.ai. That is the only server it talks to. Signing out on the website disconnects it and deletes its token.

What we collect, and why

• Your account: email address, name, and a password hash (never the password itself). To sign you in and email you sign-in and reset codes.
• Other sign-ins: if you sign in with Google, Microsoft, GitHub or your company's single sign-on, that provider tells us your email address, name and an account id. We don't receive your password there or access anything else in that account.
• Your library: the themes you add to it, so the extension can show them.
• Feedback you send: your message, and your email if you give it, to read it and reply. Sent from the extension, it also says which site, theme and extension version you were using.
• Security: your IP address, briefly, to limit repeated sign-in attempts and block floods of requests, and when each access token was last used. When you sign up or reset a password, an automated check confirms you're a person; it looks at signals from your browser, not your account. Our own logs leave out emails, addresses and tokens; our hosting provider keeps standard request logs for a short time.
• Usage counts: how many people visit, preview, add and sync themes, and how fast pages load, so we know what works. Visits and page timings aren't tied to you; actions like adding a theme are recorded with your account, and that link is removed when you delete it.

Cookies

One cookie keeps you signed in, and a short-lived one protects sign-in with another provider. Neither is used for tracking, and we use no analytics or advertising cookies.

Who processes data for us

We use a small number of service providers to run myglaze.ai. Each is bound to protect your data and gets only what its part needs:

• Hosting and security: runs the website, protects it from attacks and bots, stores theme images, and forwards email sent to our addresses.
• Database: stores account data, in the United States.
• Email delivery: sends sign-in and password reset codes to your email address.
• Sign-in providers you choose to use: Google, Microsoft, GitHub, or your company.

For the current list of providers, email privacy@myglaze.ai.

How long we keep it

Account data stays until you delete your account. Sessions expire after 30 days, sign-in codes after 15 minutes. Accounts whose email is never verified are deleted after 7 days. Usage counts are kept up to about 13 months. Deleting your account removes it, your library and your access tokens. Backups age out within 7 days.

Your choices and rights

On the Account page you can change your name and password, disconnect sign-ins, revoke access tokens, download your data, and delete your account. Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California) you also have the right to access, correct, delete or move your data, and to object to how it's used. Email privacy@myglaze.ai and we'll answer within 30 days. If you're in the EU or UK: we use your data to provide the service you signed up for, and for our legitimate interest in keeping it secure and working well; you can also complain to your local data protection authority.

Your data may be processed in the United States and other countries where our providers operate.

Children

myglaze.ai isn't for children under 13 (under 16 in the EU and UK), and we don't knowingly collect their data.

Changes

If this policy changes in a way that matters, we'll update the date above and tell account holders by email before it takes effect.