Privacy Policy
Last updated: September 2026
Glass is facility-management software built by 37TEN (“Glass”, “we”, “us”). This policy explains what information we collect when you use glass-fms.com, the Glass application at glass-fms.app, and the Glass mobile app (together, the “Service”), how we use it, and the choices you have.
Who this covers
The Service is used by two kinds of people, and we handle their information differently:
- Customers — the rinks and facilities that subscribe to Glass, and the administrators, managers, staff, and referees they add to their account.
- Members — the players, parents, and members of the public who register for programs, book ice, or receive communications from a Customer through Glass.
For Member information, the Customer decides what to collect and why; we process it on the Customer’s behalf. If you are a Member with a question about your information, contact the facility first. We will help them respond.
Information we collect
- Account information. Name, email address, and the sign-in method you choose (Google, Apple, a password, or an emailed sign-in link). Authentication is provided by Firebase Authentication, a Google service.
- Facility and scheduling information. Facility names, resources, schedules, bookings, team rosters, shifts, programs, and settings that Customers enter.
- Registration information. When a Member registers for a program: name, email, team preference, and any waiver the facility requires. A signed waiver records the typed signature, the time, and the network address it was signed from.
- Payment information. Payments are processed by Stripe. We never see or store full card numbers. We store Stripe identifiers, amounts, and payment status so facilities can see their ledger and issue refunds.
- Connected email. If a Customer administrator connects a Google account to send and read email inside Glass, we store an encrypted token that lets Glass act on that mailbox until the administrator disconnects it. We do not store copies of mailbox contents.
- Lead and support requests. If you book a demo or contact us, the details you submit.
- Technical information. Server logs (IP address, browser type, pages requested, timestamps) and, on the marketing site, privacy-respecting analytics about page views. We do not use advertising trackers.
How we use it
- To provide, secure, and support the Service, including signing you in, showing schedules, sending booking and registration notifications, and collecting payments a facility has set up.
- To bill Customers for their subscription and to send receipts and invoices.
- To respond to demo requests and support questions.
- To keep an audit trail of security-relevant actions (sign-ins, role changes, bookings, payments) so Customers can see who did what.
- To understand how the Service is used and improve it, in aggregate.
- To comply with law and enforce our Terms.
We do not sell personal information, and we do not use Member information for our own marketing.
Who we share it with
We share information only with the service providers we need to run Glass, each under its own privacy commitments:
- Stripe — payment processing, subscriptions, and payouts to facilities.
- Google (Firebase) — authentication, and Gmail access when an administrator connects a Google account.
- Neon — database hosting.
- Vercel — application and website hosting, and file storage for lobby-display assets.
- Resend — transactional email delivery.
- Apple — distribution of the iOS app and Sign in with Apple.
Within the Service, information is visible to the people a Customer has authorized: for example, a facility’s managers can see its registrations, and a team’s captain can see its roster. Public facility pages and lobby displays show schedules and team names but never individual contact details.
We may also disclose information if required by law, to protect the rights and safety of users, or as part of a merger or acquisition, in which case this policy continues to apply.
Children
Facilities may run programs for minors. Registrations for minors must be completed by a parent or guardian, and the guardian’s contact details are the ones we store. Glass accounts themselves are for adults. If you believe a child has created an account or that we hold a child’s information without guardian consent, contact us and we will remove it.
Retention
We keep account and facility information for as long as the Customer’s account is active. Registration, payment, and waiver records are kept for as long as the facility needs them and as required by financial and legal record-keeping rules. Audit logs and server logs are kept for a limited period for security purposes. When a Customer closes their account, we delete or anonymize their data within 90 days, except where we must retain it by law.
Your choices and rights
- You can view and update your account information in the Service.
- You can disconnect a connected Google account at any time from Communications settings; you can also revoke Glass’s access from your Google account settings.
- You can ask us to access, correct, export, or delete your personal information by emailing support@glass-fms.com. We will respond within 30 days. If the information belongs to a facility’s records, we may direct the request to that facility.
- Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the GDPR, including the right to complain to a supervisory authority. We honor these requests regardless of location.
Security
All traffic to the Service is encrypted in transit. Credentials for connected services are encrypted at rest. Access to production systems is limited to the people who operate Glass. No system is perfectly secure; if we learn of a breach affecting your information, we will notify affected Customers without undue delay.
Cookies
The Service uses only the cookies and local storage needed to keep you signed in and remember your preferences. The marketing site uses cookieless analytics. We do not use third-party advertising cookies.
International use
Glass is operated from the United States and information is stored there. If you use the Service from elsewhere, you consent to that transfer.
Changes
We will post any changes to this policy on this page and update the date above. For material changes we will notify Customers by email.
Contact
37TEN · Glass FMS
support@glass-fms.com