Privacy Policy

Last updated 14 October 2026

1. Who we are

Glyde is run by Cirkle Development Group (teamcirkle.co.uk), an online organisation that has no public postal address ("we", "us"). For data protection law we are the controller of the personal data described below. You can reach us about privacy at mydata@teamcirkle.co.uk, or about anything else at info@teamcirkle.co.uk.

This policy covers the Glyde browser, this website and the optional online services (Cirkle ID sign in, sync and the Szimon assistant). It follows the UK GDPR and the Data Protection Act 2018.

2. What stays on your device

The browser stores these on your device only, unless you turn on sync (see section 5):

• browsing and download history
• bookmarks and open tabs
• cookies and site data
• saved passwords and form data
• your settings and customisations

We do not receive any of this. You can delete it at any time in the browser's settings, or by removing the browser.

3. Data we collect

When	What	Why	Our legal basis
You visit this website	Standard server records such as IP address, page requested, time and browser type, kept by our hosting provider	To deliver the site and keep it secure	Legitimate interests (running a secure website)
You sign in with Cirkle ID	Account identifier, name or display name and email address	To sign you in and link your account	Contract (providing the service you asked for)
You turn on settings sync	Your synced data in encrypted form, plus basic account details	To keep your devices in step	Contract
You use the Szimon assistant (when available)	What you type to it, and any page content you choose to share	To answer you	Contract, and consent for any page you choose to share
You email us	Your email address and message	To reply and keep a record	Legitimate interests

We do not collect your browsing history, we do not build advertising profiles, and we do not sell personal data.

4. Services built into the browser

Glyde is built on Firefox technology, and a browser has to contact some services to work.

• Google Search. Google is the built-in search engine. When you search, your query and your IP address go to Google. Google acts for itself, so its privacy policy applies. Search suggestions that send what you type are off by default.
• Google Safe Browsing. The browser checks for dangerous websites using data from Google. This uses partial fingerprints of addresses rather than the full address.
• Update check. When you press Check for updates in settings, and at most once a day from the home page, Glyde asks GitHub whether a newer version of Glyde has been released. GitHub receives your IP address, as any website does. No other information is sent. You can switch the home page check off there. If you choose to install an update, Glyde downloads it from GitHub and checks its fingerprint before using it.
• Mozilla services. Some Firefox features, such as the add-ons store and security data lists, connect to services run by Mozilla unless they are switched off or removed. We keep a public list of every connection the browser makes and what it is for, and we remove those we do not need.

The browser contains no telemetry, no studies and no sponsored content.

5. Sync and end to end encryption

If you sign in with Cirkle ID and turn on sync, Glyde uploads your look and layout settings (such as colours, text size, tab position and wallpaper choice). It does not upload your history, passwords, bookmarks or open tabs. The settings are encrypted on your device before they are uploaded, using a key made from a sync passphrase that stays on your device, so we cannot read them. If you lose the passphrase we cannot recover the stored copy, only replace it with a new one. Signing out removes the sign-in from your device and tells Cirkle ID to forget it. Deleting your Cirkle ID account deletes the stored copy.

6. The Szimon assistant (planned)

The assistant is optional and off until you use it. Your messages are sent to our Szimon Engine, which may pass them to an AI provider (currently Google) to produce a reply. Do not put passwords, payment details or other secrets into it. We keep a limited record of conversations only as needed to run and protect the service, and delete it after a set period that we will state in the app. Page content is only sent if you choose to share it.

7. Who we share data with

• Our hosting and database providers, who store data for us under contract (currently Vercel and Upstash)
• Google, for the features described in sections 4 and 6
• Authorities, if the law requires it

We do not sell your data. Some of these providers are based outside the UK, mainly in the United States. Where that happens we rely on approved safeguards such as the UK addendum to standard contractual clauses or an adequacy arrangement.

8. How long we keep data

• Website server records: for the period set by our hosting provider
• Account details: while your account is open, and for up to 30 days after you delete it
• Emails to us: up to two years

9. Your rights

Under UK law you can ask us to: give you a copy of your data, correct it, delete it, limit how we use it, move it to another service, or stop using it for something based on our legitimate interests. Email mydata@teamcirkle.co.uk. We will reply within one month.

If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

10. Security

We use encryption in transit, limit who can reach data, and keep the software up to date. No system is perfectly secure. If a breach puts your rights at risk we will tell you and the ICO as the law requires.

11. Young people

Glyde is for people aged 13 and over. See Age and Young Users.

12. Changes

If we change this policy in a way that matters, we will update the date above and say so on the website and in the browser before the change takes effect.