Privacy Policy

This policy explains what GLAR (glarcom.com), run by GlarCom, keeps about people, why, and who can see it. The short version: we keep what a group needs to get together, we never sell it, and we don't track you around the web.

1. What we keep

• Account holders (leaders, managers, account owners): name, email address, a password stored only in scrambled (hashed) form, and a phone number if you add one.
• People on a group's roster, entered by the group's leader or by the person themselves: name, email address, phone, what they play or do, any needs they share for events, and for a youth group a parent's or guardian's name and email.
• Group activity: events, venues, poll and offer answers, set lists, songs and charts, equipment loans, pay or dues records, and messages sent through GLAR.
• Feedback you send, with a screenshot if you choose to add one.
• Advertisers: business and contact details and the ads they place. Card payments are handled by Stripe; GLAR never sees or stores card numbers.
• Technical: your internet address is used for a short time to stop abuse (rate limits and sign-in lockouts). Our host keeps ordinary server logs.

2. Cookies

GLAR uses two small cookies: one keeps you signed in, and one remembers which of your groups you were working in. There are no advertising, tracking or analytics cookies. Ads are chosen by kind of page and area, never by following you.

3. How we use it

• to run the service: send offers, polls, reminders and messages your group asks GLAR to send;
• to keep GLAR secure and working, and to answer feedback;
• to tell account owners about important changes.

We don't sell or rent personal information, and we don't send marketing email.

4. Who can see what

• A group's leaders and managers see that group's roster and activity.
• Members don't see each other's email addresses or phone numbers.
• GLAR's site master sees names and counts only, not a group's roster, events or messages, unless a group's leader opens their group to the site master for a limited time to get help. That access is logged and the leader can end it.

5. Services that help run GLAR

These companies handle information only to provide their service to GLAR:

• Railway (hosting and the database), Cloudflare (domain and file storage), Resend (sending email);
• Stripe (advertiser payments);
• Anthropic (an AI service that helps draft replies to feedback and check new ads; it sees the feedback or ad text);
• GitHub (feedback is copied there as a work item, without names or email addresses);
• Google Fonts and OpenStreetMap (your browser loads lettering and map pictures from them, so they see your internet address).

We may also share information if the law requires it, or to protect people's safety.

6. Children and youth groups

Account holders must be 18 or over. A group for young people can be marked a youth group. Then every email about a child goes to their parent or guardian, children can message only their leaders, messages can't include phone numbers, email addresses or links, and the guardian gets a copy. A leader must have a parent's or guardian's permission before adding a child. A parent or guardian can ask for their child's information to be shown to them or deleted.

7. How long we keep it

We keep a group's information while the group uses GLAR. Taking someone off a roster hides them from the group's lists but keeps their past answers and records; to have a person's information deleted, ask (see below). When we delete information on request, or close a group or account, copies remain only in backups until those expire (30 days) and in records the law requires us to keep.

8. Your choices

You can ask to see, correct or delete your information. Ask your group's leader first, since they keep the roster; or use the Feedback button and we will help. Depending on where you live you may have other rights too, and we will honor them.

9. Security

Pages are sent over an encrypted connection, passwords are stored hashed, sign-in tries are limited, and each group is walled off from the others. No system is perfectly secure; if we learn of a breach affecting you, we will tell you.

10. Changes and contact

We may update this policy and will post the new version here with a new date. Questions? Use the Feedback button on any page.