Privacy
What Glyph stores, where, and what it never collects.
Glyph has no ads, no tracking and no telemetry.
Without an account
Everything stays on your computer: library, playlists, settings, downloads and caches. The app sends an anonymous installation id to the server so rate limits work; it is not tied to you and can be reset.
With an account
| Stored on the server | Not stored |
|---|---|
| handle | your password |
| password salt and a hash of a key derived on your device | IP addresses |
| passkey public keys, recovery-code hash | user agents |
| device name, platform, first and last seen, approximate country | listening history |
| synced items: liked songs, playlists, artists, albums, searches, download list | audio |
| settings, and API keys end-to-end encrypted | |
| profile picture, banner and what you chose to show | |
| listening statistics, only if you turned them on |
Not synced: recently played, play counts, lyrics offsets, downloaded files, the server address and other device-specific settings.
Profiles
Profiles are only visible to signed-in users. Playlists and recently played songs appear only when you turn them on under Settings › Profile & privacy. Turning recently played off deletes it on the server.
Export and delete
GET /v1/sync/exportreturns all your synced items as JSON.- Settings › Account › Delete removes your account, devices, synced items, profile, images and short links at once. The handle is held for 30 days. The library on each device stays.
Your own server
On a self-hosted server the operator holds this data. On the public server that is the Glyph project.