Privacy Policy

1. Who we are

Gloss is operated by Dhiraj Kavuri (“we”, “us”). This policy explains what information Gloss handles when you use the website and editor, and why. For privacy questions, email dhirajkavuri@gmail.com.

2. Your images, videos and mockups

The editor runs entirely in your browser. Images and recordings you add, the mockups you design and the files you export are processed on your own device and are never uploaded to our servers. We cannot see them.

The “Try it here” area on our homepage works the same way: a file you drop there is passed to the editor through your browser’s own storage, not through us.

Share links put your scene settings — layout, device, style, annotation text and camera moves — into the link itself. They never contain your files. Anyone you send a link to can read those settings.

3. Storage on your device

To make the editor work, your browser stores some data locally. It stays on your device and is not sent to us:

• Drafts you save (your scene and its media), in IndexedDB.
• Saved themes, in local storage.
• Files handed from the homepage to the editor, briefly, until the editor opens them.

You can delete this at any time by deleting drafts in the editor or clearing site data in your browser settings.

4. Buying Pro

Payments are processed by Dodo Payments, our merchant of record. Dodo Payments collects the details needed to take payment — such as your name, email, billing address and card details — under its own privacy policy. We never see your full card details.

To give you Pro, we receive from Dodo Payments:

• your email address and customer ID;
• your order or payment ID and its status (for example paid, refunded or disputed);
• your license key and its activations.

We use this only to unlock and verify Pro, restore it on your other browsers, deliver receipts and support, prevent fraud, and meet legal and tax obligations. We don’t keep a user database: the information lives in a secure cookie in your browser (see below) and in Dodo Payments’ records.

5. Cookies

We use only functional cookies that make Pro work. We don’t use advertising or cross-site tracking cookies.

• gloss_session — a signed, HttpOnly cookie set after you buy or restore Pro. It holds your payment ID, customer ID, email and license key so we can confirm you have Pro. It lasts up to one year.
• gloss_nonce — a short-lived cookie (about 15 minutes) set when you start checkout, so we can safely match the completed payment to your browser.

You can remove these cookies by clearing site data; you can restore Pro afterwards with your license key.

6. Other services we use

• Hosting — our hosting provider processes standard request information (such as IP address, browser type and the pages requested) to deliver the site and keep it secure. These logs are kept for a limited time under the provider’s policies.
• Unsplash (optional) — if you search for background photos, your search terms are sent through our server to Unsplash, and the photos load directly from Unsplash’s servers, which see your IP address. When you pick a photo, we tell Unsplash it was used, as their guidelines require.
• Fonts are served from our own domain; your browser doesn’t contact a third-party font service.

If we add privacy-friendly analytics in the future, we’ll update this policy first.

7. Why we can use your information

Where privacy laws like the GDPR apply, we rely on:

• Contract — to provide Pro you’ve paid for;
• Legitimate interests — to keep the Service secure, prevent fraud and answer support requests;
• Legal obligation — for tax and accounting records (kept by Dodo Payments as merchant of record).

8. Sharing

We don’t sell or rent your personal information, and we don’t share it for advertising. We share it only with the service providers above to run Gloss, or when required by law. These providers may process data in other countries, including the United States, with appropriate safeguards.

9. How long we keep it

We don’t run a database of users. The Pro cookie expires after a year or when you clear it. Dodo Payments keeps order and payment records for as long as the law requires. Support emails are kept only as long as needed to help you.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict how it’s used. Email dhirajkavuri@gmail.com from the address you used at checkout and we’ll help — passing requests to Dodo Payments where they hold the data. You also have the right to complain to your local data-protection authority.

11. Children

Gloss isn’t directed at children under 16, and we don’t knowingly collect their personal information.

12. Changes

We’ll update this policy if our practices change, and change the “Last updated” date above. See also our Terms of Service and Refund Policy.