GLASSLINE PRIVACY POLICY

Last Updated: October 5, 2026

Glassline LLC (“Company,” “we,” “us”) operates the Glassline application and related services (the “Service”). This Privacy Policy describes how we collect, use, and protect your personal data.

We designed Glassline with a straightforward data principle: your data is handled by Glassline and the limited service providers described in this Privacy Policy and is used to operate and improve the Service for you. We do not sell your personal data for monetary consideration. On our website we use limited advertising and conversion-measurement technologies (currently a Google Ads tag, and we expect to add a Meta pixel) to measure the effectiveness of our marketing. Depending on your jurisdiction this may be considered targeted advertising, and you can opt out as described in Section 5.

§1. Information We Collect

We collect the categories of personal data described below to provide, operate, secure, and improve the Service. Providing certain information is necessary to create an account and use the Service; if you choose not to provide it, some or all features may be unavailable to you. We collect personal data that you provide directly, data collected automatically through your use of the Service, and data we receive from service providers acting on our behalf.

1.1 Information You Provide

• Account information: Name, email address, birth year, and password

• Payment information: Collected and processed by our third-party payment processor. We do not store full credit card numbers or payment credentials.

• Mailing address: If you claim or redeem a physical item (such as a Founding Member sticker pack), we collect the mailing address you provide so we can ship it to you.

• Hunting preferences and profile inputs: Weapon type, species selections, including deer and other species, state or jurisdiction selections, including additional states or jurisdictions, experience level, preference points, residency, hunt and draw objectives, preferred hunting style and tactics, preferred units, maximum comfortable elevation, maximum daily hike distance, home location or address-derived distance, and other planning preferences and constraints used to generate, score, and rank hunt areas, routes, plans, and plays

• Communications and field content: Feedback, support inquiries, beta testing comments, survey responses, messages you send us, and field observations and records you create or import, including observations, sightings, sign, tracks, trails, camps, day-by-day plans, imported GPX or KML files, emergency-plan exports, and related notes

1.2 Information Collected Automatically

• Usage data: Features used, pages viewed, actions taken, session duration, interaction patterns, beta participation records, consents, preferences, and acceptance timestamps

• Location data: Approximate location derived from IP address and, with your permission, precise GPS and background location. We collect precise location in the foreground to show your current position and support location-based features and hike tracking. If you separately and affirmatively opt in to background location, we may collect location while the app is not in active use to continue hike tracking, support geofencing, and create low-rate hunt-mode traces at approximately 15-minute intervals. You can control location permissions through your device settings and withdraw permission at any time. If you deny or withdraw precise or background location permission, maps may not show your current position and hike tracking, hunt-mode traces, geofencing, routing, and other location-dependent features may be limited or unavailable. We store collected precise location in Glassline’s own database hosted on a DigitalOcean server controlled by Glassline; Glassline does not use a third-party location or tracking provider to collect or maintain those traces.

• Log data: IP address, access times, referring URLs, and error logs

• Cookies and similar technologies: On our website we and our advertising partners use cookies, tags, pixels, and similar technologies (currently a Google Ads tag, and we expect to add a Meta pixel) to measure advertising conversions and marketing effectiveness. These technologies may collect online identifiers, cookie and device identifiers, IP address, and website activity. You can control these through your browser or cookie settings and the opt-out options described in Section 5.

We use the personal data we collect for the purposes described in Section 2 and for other purposes compatible with the context in which the data was collected. We use a user’s precise location, saved locations, and field observations only to provide that user’s suggestions, routes, plans, historical records, and future-season planning, and not for another user’s recommendations. We do not use your personal data for purposes that are materially different from those disclosed here without providing notice and, where required by applicable law, obtaining your consent. Consistent with our data principle, we do not sell your personal data for monetary consideration; our use of website advertising and conversion-measurement technologies is limited to measuring our own marketing, and you may opt out of targeted advertising as described in Section 5.

§2. How We Use Your Information

2.1 Service Operation

• To provide, maintain, and operate the Service and your account

• To process your subscription and payments

• To personalize your experience and to generate, score, and rank suggestions, hunt areas, routes, plans, and plays for you based on your stated preferences, profile inputs, saved locations, and field observations, including historical records and future-season planning

• To construct and submit prompts to Anthropic incorporating your planning inputs, saved locations, and field observations and generate AI-powered content solely for your suggestions, routes, plans, historical records, and future-season planning; we do not use this content for internal or third-party model training or for recommendations to other users

• To provide customer support

• To analyze historical draw data together with your inputs and provide draw-odds and unit recommendations

• To send requested planning and deadline reminders only by push notification and email, subject to your notification and communication settings

• To fulfill and ship physical items you claim or request, using your mailing address solely for that shipment

2.2 Service Improvement

• To analyze app-usage events, such as features used and actions taken, and improve features, performance, and reliability; product analytics do not use the content of your precise location, traces, saved locations, or field observations

• To conduct internal research and development using app-usage events and other data that do not include the content of your precise location, traces, saved locations, or field observations; we do not use personal data to train internal or third-party models

• To monitor and prevent technical issues

2.3 Communications

• To send service-related communications (account verification, security alerts, billing notices, renewal reminders, policy updates)

• To send product updates and feature announcements, which you may opt out of at any time via the unsubscribe link in each email or through Settings. We will honor opt-out requests within 10 business days.

All marketing emails include a functioning unsubscribe mechanism, accurate sender identification, a valid physical postal address, a non-deceptive subject line, and clear identification as promotional content where applicable, in compliance with the CAN-SPAM Act (15 U.S.C. § 7701 et seq.). We honor opt-out requests within ten (10) business days. Service-related and transactional communications (such as account, security, billing, and policy notices) are not promotional and are not subject to marketing opt-out, and you may continue to receive them for as long as you maintain an account.

2.4 Legal and Safety

• To comply with legal obligations

• To protect the rights, safety, and property of the Company and its users

• To enforce our Terms of Service

§3. How We Share Your Information

We do not sell your personal data for monetary consideration. We use third-party advertising and conversion-measurement technologies on our website (currently Google Ads, and we expect to add a Meta pixel) that may disclose online identifiers, cookie and device identifiers, IP address, and website activity and conversion events to those providers to measure and improve our marketing. Depending on your jurisdiction, this may be considered targeted advertising, or a sale or sharing, under applicable privacy laws, including the Colorado Privacy Act, and you may opt out as described in Section 5. We share other personal data only as described in this Section and only to the extent necessary for the disclosed purpose.

We share data only with the following categories of service providers, solely as needed to host, operate, secure, support, and provide the specific functions of the Service described below:

3.1 Service Providers

These providers are contractually required to use your data only to provide services to us and are prohibited from using it for their own purposes, including advertising or model training. We limit disclosures to the data reasonably necessary for the provider’s stated function.

Each service provider acts as our processor and is engaged under a written contract that requires it to process personal data only on our documented instructions and solely to provide services to us, to maintain confidentiality and appropriate security safeguards, to assist us with data-subject requests and breach response, and to delete or return personal data at the end of the engagement, consistent with C.R.S. § 6-1-1305. We do not authorize any service provider to use your personal data for its own purposes, including advertising or model training. Replacing or adding a service provider within a category already described in this Section, where the new provider is subject to equivalent contractual protections and the categories of data shared and purposes remain materially the same, is not a material change requiring re-acceptance.

3.2 Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect rights, safety, or property.

3.3 Business Transfers

In the event of a merger, acquisition, sale of assets, corporate reorganization, assignment, migration, or transfer of the Glassline business, your information may be transferred, including from LeanTwo Ltd. as historical developer or prior owner to Glassline LLC as operator. We will notify you before your information becomes subject to a materially different privacy policy.

§4. Future Commercial Features

The Service may in the future introduce commercial features such as affiliate product recommendations or brand partnerships. If and when such features are introduced, we will update this Privacy Policy to describe any new data practices before launch. Before implementing a material change, including a new or materially changed practice involving sensitive data, precise geolocation, background tracking, AI processing, model training, advertising, or disclosure to third parties, we will provide advance notice and require re-acceptance of the updated policy before continued use and renewed affirmative consent where required by applicable law.

§5. Your Rights and Choices

5.1 All Users

• Account data: Access, update, or correct your information through Settings.

• Marketing communications: Opt out via “unsubscribe” or Settings.

• Sensitive data and location consent: We obtain your affirmative consent before collecting or processing precise geolocation and other sensitive data as required by applicable law, and a clear, separate affirmative opt-in before collecting background location. You may revoke consent and disable precise or background location through your device settings at any time. Withdrawal stops future collection governed by that permission but does not affect processing that occurred before withdrawal; maps may not show your current position, and hike tracking, hunt-mode traces, geofencing, routing, and other location-dependent features may be limited or unavailable.

• Deletion: Delete individual observations, marks, trails or tracks, and imported files through available in-app controls. You may request account deletion via support@glassline.guide or Settings; account deletion results in immediate soft deletion and permanent purge within 30 days, subject only to the narrow exceptions described in Section 6.

• Access, correction, and export: Access, update, or correct available information in Settings, and request access to or a portable copy of your personal data via support@glassline.guide. You may also revoke consent or request deletion, subject to applicable law.

5.2 State and Jurisdiction-Specific Privacy Rights

Depending on where you live, applicable privacy law may provide the following rights. Colorado residents have these rights under the Colorado Privacy Act (C.R.S. § 6-1-1301 et seq.), enforced by the Colorado Attorney General:

• Right to access your personal data

• Right to correct inaccuracies

• Right to delete your personal data

• Right to data portability in a readily usable format

• Right to opt out of targeted advertising: We use advertising and conversion-measurement technologies on our website, and you may opt out of targeted advertising as described below in this Section, including through a recognized universal opt-out mechanism

• Right to opt out of sales (not currently applicable — we do not sell personal data)

• Right to opt out of profiling (not currently applicable)

To exercise your rights: Contact support@glassline.guide or use Settings. We will respond within forty-five (45) days of receiving your request, and may extend this period by an additional forty-five (45) days where reasonably necessary, in which case we will inform you of the extension and the reason for it. To protect your data, we may take reasonable steps to verify your identity before fulfilling a request, and we may decline requests that we cannot verify or that are manifestly unfounded, excessive, or repetitive as permitted by law.

How to opt out of targeted advertising: You can opt out of targeted advertising and conversion measurement by adjusting the cookie or tracking settings on our website, by using the opt-out tools offered by Google and Meta, and by broadcasting a recognized universal opt-out mechanism such as Global Privacy Control (GPC), which we will honor to the extent required by the Colorado Privacy Act.

Appeals: If we decline to take action on your request, you may appeal by contacting support@glassline.guide within a reasonable time. We will respond to your appeal in writing within forty-five (45) days, and where the appeal is denied, we will provide our reasons and information on how to contact the Colorado Attorney General or another applicable privacy regulator to submit a complaint.

We will not discriminate against you for exercising any of your privacy rights, including by denying the Service, charging a different price, or providing a different level or quality of the Service, except where a difference is reasonably related to the value provided by your data or otherwise permitted by law. You may use an authorized agent to submit a request on your behalf; we may require the agent to provide proof of authorization and may require you to verify your own identity directly with us.

5.3 User-Initiated Export and Sharing

You may choose to export or share camps, dates, areas, trails, routes, or plans with emergency contacts or others through GPX, KML, or similar files. Glassline processes the export or transmission at your direction. Once a recipient receives the file or information, the recipient’s storage, use, further disclosure, and security practices are outside Glassline’s control, so share only with people you trust.

§6. Data Retention

We retain personal data, including saved locations, field observations, trails and tracks, plans, and imported files, until you delete an individual item or delete your account. This multi-year retention keeps historical records available across seasons and supports future-season planning. When you delete an individual observation, mark, trail or track, or imported file, we remove it from active use, subject only to the narrow backup and legal exceptions below. After account deletion:

• The account and associated personal data are soft-deleted immediately and are permanently purged from active systems within 30 days.

• De-identified, aggregated app-usage events that cannot identify you may be retained for analytics and product improvement, but they do not include precise-location content, traces, saved locations, or field-observation content.

• Data may remain for a limited period in backups that are isolated from ordinary use and deleted or overwritten on the regular backup cycle, or be retained only to the extent and for the period required by a specific legal obligation, preservation order, or active dispute. We will restrict such data from other use and delete it when the exception ends.

• Mailing addresses collected for a physical shipment are used only to fulfill that shipment and to resolve delivery issues and are deleted within 90 days after fulfillment unless retention is required by law.

§7. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect your personal data against unauthorized access, use, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls and authentication requirements, the principle of least privilege for personnel and service providers, network and application security practices, and periodic review of our security controls. We also require our service providers to maintain safeguards appropriate to the data they process on our behalf.

No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity under your account, and you agree to notify us promptly of any suspected unauthorized access. In the event of a security breach affecting your personal data, we will notify you and applicable authorities as described in Section 8.

§8. Data Breach Notification

In the event of a security breach affecting your personal information, we will notify affected users in the most expedient time possible and without unreasonable delay, and no later than thirty (30) days after determining that a breach has occurred, consistent with Colorado law (C.R.S. § 6-1-716), unless a shorter period is required by law or a delay is requested by law enforcement. Our notice will describe, to the extent known, the nature of the breach, the categories of personal information affected, the steps we are taking, and measures you can take to protect yourself. If a breach affects 500 or more Colorado residents, we will also notify the Colorado Attorney General within the timeframe required by law.

We maintain contracts with our service providers requiring them to notify us promptly of any security incidents affecting data they process on our behalf. Incident response procedures will account for beta user data, migrated records, vendor systems, repositories, developer tools, and service-provider environments that process Glassline data.

§9. Children’s Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal data from anyone under 18. Consistent with the Children’s Online Privacy Protection Act (COPPA) and applicable law, if we learn that we have collected personal data from an individual under 18, we will delete it promptly. If a user indicates during account creation that they are under 18, registration is blocked and no account data is retained. If you believe a person under 18 has provided us personal data, please contact support@glassline.guide so we can take appropriate action.

§10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will provide advance notice of material changes to data collection, use, or sharing practices. Material changes involving sensitive data, precise geolocation, background tracking, AI processing, model training, advertising, or disclosure to third parties will require re-acceptance before continued use and renewed affirmative consent where required by applicable law.

§11. Contact Us

Glassline LLC

834 S Perry St, Suite F #743, Castle Rock, CO 80104

support@glassline.guide