GLINT Website Privacy Policy

Effective date: September 28, 2026 · Version 2026-09-28.2

Who we are and what this covers

TimeToLockIn, Inc. operates GLINT. This policy describes information handled through glint.hair, our camera reservation service, and related customer support.

The reservation website does not upload or analyze your scalp photographs. The hair images and app screens shown on the website demonstrate the product experience. Camera-app scanning, AI analysis, and coaching will have privacy information specific to those services before you use them.

Information we collect

Reservations and payments. When you reserve a camera, we and our payment provider collect information needed for checkout, such as your email address, name, billing and shipping details, and payment information. Our reservation database stores your email address, reservation and payment references, payment/refund status, timestamps, the terms version presented at checkout, and evidence of acceptance reported by our payment provider. Stripe processes card details through its hosted checkout; our application does not receive or store your full card number or security code.

Customer support. We receive the information you include in emails and other support communications. Please do not send medical records, scalp photographs, card numbers, passwords, or private reservation links for routine reservation support.

Website operation and security. We process technical information needed to serve the site and prevent abuse, including request information, IP addresses, browser information, and reservation-access identifiers. Hosting and payment providers may also maintain security and service logs. Our application uses hashed identifiers for its database-backed rate limits.

Email delivery. We record message references and delivery-related information, including bounce and complaint events. We use this information to troubleshoot delivery and avoid sending additional messages to suppressed addresses.

How we use information

We use information to process and manage reservations, confirm payments, issue refunds, provide private access links, communicate about your order, answer support requests, prevent fraud and abuse, maintain reliable services, and meet legal and accounting obligations.

A reservation does not enroll you in paid Premium or authorize recurring payments. Transactional reservation messages are separate from promotional email enrollment.

Service providers and other disclosures

Our reservation service uses:

• Stripe for payment processing, hosted checkout, payment records, and refunds.
• Vercel for website hosting and application infrastructure.
• Neon for the production reservation database.
• Resend for transactional email and delivery feedback.
• Google Workspace for support email.

These providers process information needed to perform their services. Provider terms and privacy notices may also apply to their own activities. We may disclose information when required by law or when reasonably necessary to investigate fraud, protect people or services, or exercise legal rights. If our business is transferred, information may be included subject to applicable protections and notice requirements.

Cookies and browser storage

The reservation service uses a necessary cookie, `glint_reservation`, to recognize an authorized browser. It lasts up to 30 days. It is marked HttpOnly and SameSite=Lax and is transmitted securely on our HTTPS site. Clearing it may require you to request a new reservation access link.

We also use browser session storage for checkout-attempt and reservation references. This supports checkout recovery and is generally cleared when the browser tab or session closes. Private email access links expire after 30 days.

The GLINT website currently does not install advertising pixels or third-party behavioral analytics tags. We do not use reservation information for sale or cross-context behavioral advertising. Our application does not currently change its operation in response to browser Do Not Track signals. Stripe and other providers may use their own technologies for security and payment functions; their practices are described in their privacy notices. We will update this policy and implement any required controls before adding advertising tracking.

How long information is kept

We keep reservation and transaction information as needed to manage your reservation, process refunds, maintain required financial records, resolve disputes, and comply with legal obligations. Support records are kept as needed to resolve requests and maintain an appropriate service history.

Private access links expire after 30 days. Our application clears temporary email-job access tokens after sending or terminating a job. Completed or terminated email-job recipient details are scheduled for clearing after 30 days, while delivery event records are scheduled for deletion after 90 days. Minimal delivery records may remain to prevent duplicate messages. Suppression records are retained as needed to respect delivery restrictions. These application schedules do not automatically delete records held in Stripe, support email, provider logs, or backups.

Your requests and choices

Contact support@glint.hair to request access to, correction of, or deletion of information associated with your reservation. We may need to verify your identity before acting. We will explain any information we must retain for legal, security, accounting, or transaction purposes. Your rights and applicable exceptions depend on the laws that apply to you.

You can manage necessary browser storage through your browser settings, although disabling it can affect reservation access. Contact support if you cannot access your reservation.

Security and processing locations

We use technical and organizational measures intended to protect information, including encrypted website connections, restricted reservation access, and signed provider callbacks. No system can guarantee absolute security. Keep your private access links confidential.

Our business operates in the United States. Our service providers may process information in the United States and other locations where they operate.

Children

The reservation service is intended for adults and is not directed to children under 13. If you believe a child has provided information to us, contact support so we can investigate and address it.

Policy changes

We will post updates here with a new effective date. For material changes affecting reservation information, we will provide a prominent website notice or notify affected customers by email, as appropriate, and obtain consent when required.

Contact

support@glint.hair