# Privacy

> What Glyph stores, where, and what it never collects.

Glyph has no ads, no tracking and no telemetry.

## Without an account

Everything stays on your computer: library, playlists, settings, downloads and
caches. The app sends an anonymous installation id to the server so rate limits
work; it is not tied to you and can be reset.

## With an account

| Stored on the server | Not stored |
| --- | --- |
| handle | your password |
| password salt and a hash of a key derived on your device | IP addresses |
| passkey public keys, recovery-code hash | user agents |
| device name, platform, first and last seen, approximate country | listening history |
| synced items: liked songs, playlists, artists, albums, searches, download list | audio |
| settings, and API keys **end-to-end encrypted** | |
| profile picture, banner and what you chose to show | |
| listening statistics, only if you turned them on | |

Not synced: recently played, play counts, lyrics offsets, downloaded files, the
server address and other device-specific settings.

## Profiles

Profiles are only visible to signed-in users. Playlists and recently played
songs appear only when you turn them on under **Settings › Profile & privacy**.
Turning *recently played* off deletes it on the server.

## Export and delete

* `GET /v1/sync/export` returns all your synced items as JSON.
* **Settings › Account › Delete** removes your account, devices, synced items,
  profile, images and short links at once. The handle is held for 30 days. The
  library on each device stays.

## Your own server

On a [self-hosted server](self-hosting/overview.md) the operator holds this data.
On the public server that is the Glyph project.