This Privacy Policy explains how 8082 Bahamas Ventures Limited (a Bahamas International Business Company, IBC No. 1503160, registered office Lyford Cay House, Western Road, Nassau, New Providence, The Bahamas — P.O. Box SP-63131, Nassau, New Providence, The Bahamas), trading as Glyphline ("Glyphline", "we", "us"), collects and uses personal data when you visit glyphline.io or buy a licence. For the purposes of the EU and UK General Data Protection Regulation (GDPR), Glyphline is the data controller. Privacy contact: privacy@glyphline.io.

We are established outside the EU/UK. Where Article 27 GDPR requires it, we will designate an EU/UK representative; until then, individuals in the EEA or UK may contact us at the address above or at privacy@glyphline.io.

1. Personal data we collect

• Information you provide: your name, email address, billing address and country (collected at checkout), the website domain you optionally enter when licensing, any messages you send us, and — if you request the free font or subscribe — your email address.
• Payment data: card payments are processed by our payment provider (see below). We do not receive or store full card numbers.
• Data collected automatically: when you visit the site, our first-party analytics records the pages viewed, the referring website, and basic device/browser type, and sets a first-party cookie (gl_vid) containing a random identifier so we can count unique visitors. Our web server and hosting logs may briefly process your IP address to operate and secure the site.

2. How we use your data and our legal bases

• To process and deliver your order (downloads, licence certificate) and provide support — performance of a contract (Art. 6(1)(b)).
• To send the free font, the welcome email, and occasional emails about new typefaces — your consent (Art. 6(1)(a)); you can withdraw consent at any time (every email lets you opt out).
• To keep accounting, invoicing and tax records — compliance with a legal obligation (Art. 6(1)(c)).
• To run first-party site analytics and understand traffic — your consent where legally required, otherwise our legitimate interests (Art. 6(1)(f)) in operating and improving the site.
• To protect our fonts, detect unlicensed use of the domains you licence, and prevent fraud or abuse — our legitimate interests (Art. 6(1)(f)).

3. Who we share data with

We share personal data only with providers who process it on our instructions, and with authorities where the law requires. We do not sell your personal data. Our key processors are:

• Polar Software, Inc. — our merchant of record; handles checkout, card processing, invoicing and order data.
• Resend — sends our transactional, welcome and (if you opt in) marketing emails.
• DigitalOcean — hosting. Our server is located in the United Kingdom (London region).

4. International transfers

Our hosting is in the United Kingdom. Some processors (for example Polar and Resend) are located in the United States. Where we transfer personal data outside the EEA or UK, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses and/or providers certified under the EU–US Data Privacy Framework. You may contact us for more information about these safeguards.

5. Cookies & analytics

We use a single first-party analytics cookie (gl_vid, which expires after about 12 months) to count unique visitors, together with any strictly necessary cookies needed to operate the store and checkout. We use our own first-party analytics; we do not use third-party advertising trackers and we do not sell your data. Where consent is legally required for non-essential cookies, we will obtain it before they are set. You can delete or block cookies in your browser at any time.

6. How long we keep data

• Order, invoice and tax records: retained for as long as required by applicable accounting and tax law (typically up to 7 years).
• Free-font subscribers / marketing list: until you unsubscribe or ask us to delete your data.
• Analytics: kept in aggregate; the visitor cookie expires after about 12 months.
• Support messages: kept only as long as needed to handle your request.

7. Your rights

If you are in the EEA or UK, you have the right to: access your data; have it corrected; have it erased; restrict or object to its processing (including objecting to direct marketing at any time); receive it in a portable format; and withdraw consent at any time (without affecting processing already carried out). We do not use automated decision-making or profiling that produces legal effects concerning you.

To exercise any of these rights, email privacy@glyphline.io. We will respond within one month. You also have the right to lodge a complaint with your local data protection supervisory authority, though we would welcome the chance to resolve your concern first. Depending on your location, you may also have rights under the Bahamas Data Protection (Privacy of Personal Information) Act, 2003, and the California Consumer Privacy Act (CCPA).

8. Children

The site and our products are not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

9. Changes & contact

Privacy contact: privacy@glyphline.io. We will post material changes to this Policy here with a new effective date.

Registered seller: 8082 Bahamas Ventures Ltd., Lyford Cay House, Western Road, Nassau, New Providence, The Bahamas — P.O. Box SP-63131, Nassau, New Providence, The Bahamas, governing law of the Commonwealth of The Bahamas, contact licensing@glyphline.io, website glyphline.io.