Privacy policy
Glimmer Index is run by Crest Systems. This page covers what we store when you use it and who else handles it.
Browsing
You don't need an account to use the site. It sets cookies only to keep you signed in and to hold the comparisons you save.
Like most web servers, ours keeps a request log. Each entry has your IP address, the address you asked for, your browser and the page that sent you. We use it to keep the site running and safe, and it's deleted after about two weeks.
We count visits with Umami, an analytics tool we host ourselves. It doesn't set cookies or follow you around the web. It keeps a random ID in your browser's local storage so we can tell new visitors from returning ones, and clearing site data gives you a new one. It records which pages and features get used, and what people search for in the model catalog. It also notes your browser, operating system, device, screen size and language, the page that sent you, and the country you're visiting from, which Cloudflare works out from your IP address. It doesn't keep the IP address itself. It never receives task descriptions you write, your email address, passwords or private links. When you follow a link from Glimmer Index to another Crest Systems site, or copy a link to share, we add a one-time code to it. That lets us connect the visit the link leads to with your visit here.
Your comparisons
When you ask for suggested priorities, a model running on our own hardware reads your task description. Task descriptions are never sent to an outside AI provider. When you save a comparison we store its task description, your priorities and the models you picked. Your workspace is tied to a secure cookie in your browser, and to your account once you have one.
Accounts
An account stores your email address, a hash of your password (never the password itself) and your email settings. Sign-ins last 30 days. If you start signing up and never confirm your email, the address and password hash stay in a pending record. The link expires after a day, and the record is cleared out the next time the site sends a sign-up or reset email.
If you sign in with Google, Google sends us a signed token with your Google account ID, your email address and basic profile details such as your name and picture. We keep the account ID and email address, use them to sign you in and to send the email described below, and discard the rest. We don't get your Google password or access to anything else in your Google account. When Google sign-in is available, our sign-in and account pages load Google's button from Google, so Google can see those visits. Google's own privacy policy covers that.
To slow down repeated sign-in attempts we record each one with a hash of your IP address. For emailed links we also hash the email address. We use these records for nothing else.
We send account confirmations, password resets and the weekly digest through Resend, which receives your email address and each message. We keep a copy of each digest we send you while your account exists. The digest is on by default. You can turn it off on your account page or from the link in any digest.
Payments
Glimmer Index Plus is billed through Stripe. Your card details go to Stripe and never reach us. We give Stripe your email address when you start checkout. We keep your Stripe customer ID and subscription status so we know which plan you're on. Canceling doesn't delete your saved work.
Where it's kept
The site runs on a server we rent and manage. Our analytics and the model that reads task descriptions run on our own computers. Cloudflare carries the analytics traffic and visits to our old modelcadence.com address. Account data and saved comparisons are backed up daily to our own computers, and each backup is kept for about a month. Beyond our hosting provider, Cloudflare, Google, Resend and Stripe, as described above, we don't share your data with anyone.
Deleting your data
Ask us to delete your account and we'll remove it with its saved comparisons. We'll confirm the request came from the account's email address first. Copies in our backups are gone within about a month. Stripe keeps its own records of past payments. Contact Crest Systems.
Changes
If any of this changes, we'll update this page and the date at the top.