Privacy
glu.tv is two things that want very different amounts of data. The directory of films collects very little. glu studio, where you sign in and make things with AI, has to keep more, so it gets most of this page. There are no ads and we don't sell your data.
Who this covers
"We" means ykeo Pty Ltd, the Australian company that runs glu.tv and glu studio. Privacy questions, requests about your information and complaints go through the contact form: choose "Privacy or my data".
Traffic: Google Analytics 4
We run GA4 to see whether anyone's watching, and what they watch. It runs on the glu.tv directory and nowhere else, and glu studio doesn't load it at all. When it loads, your browser connects to Google, so Google receives your IP address. GA4 uses it to work out your rough location and, by Google's account, doesn't store it.
| What | Detail |
|---|---|
| Collected | Pages viewed, rough location (country and city), referrer, and your device, browser, operating system, screen size and language |
| Your activity | Which films you open and watch, and for how long. What you type into the site's search box. The filters you pick, your taps and scrolling, and links you follow off the site. That the contact form was sent, and the reason you picked, never your name, email or message |
| Cookies | Google Analytics cookies, set only once analytics loads (in the EU, UK and Switzerland, after you accept) |
| Kept for | 14 months, GA4's retention setting for this data |
| Who sees it | Us, in Google's dashboard. Google processes it under its own privacy policy |
GA4 is the only analytics that uses cookies on the directory. Outside the EU, UK and Switzerland, we also use Cloudflare Web Analytics, which uses no cookies, to measure visits and page speed. When we ask about cookies, we also keep an anonymous daily count of how many visitors were asked and what they chose, with no cookie or identifier and without storing anything on your device.
There are no ad pixels, nothing that follows you around other websites, and Google signals (the setting that links analytics to Google accounts for advertising) is off. None of it gets sold. We don't respond to Do Not Track signals.
Films and thumbnails
Films play in YouTube's own player, embedded from its nocookie domain, which cuts down the tracking YouTube would otherwise do. It doesn't switch tracking off altogether. The player loads only when you press play. Once a video starts playing, or if you're signed into a Google account, Google's own privacy policy takes over for that part. We don't see what YouTube collects and we don't store it.
Film covers load from the video platforms' own servers, so they receive your IP address and browser details. We get nothing back from them.
The contact form
Use the form and we get what you typed into it: your name, your email, the reason you picked, your message, and the YouTube link and tools if you're submitting a film. It goes to our inbox, which is run by Google, and we keep it for up to 24 months. We use it to reply to you, not to add you to a list. If you submit a film, we also keep your name, email, country and message with the film's record. Cloudflare Turnstile checks you're not a bot, which sends Cloudflare details about your browser and visit, and an email delivery service carries your message to our inbox.
The Reel: a weekly email
The Reel is a free weekly email listing new films in the genres you pick, for people 18 or older. It's run by ykeo Pty Ltd and is separate from glu studio. You give us your first name, email address and genres, and nothing goes out until you confirm by email. We send it because you agreed to, and you can withdraw that at any time.
We keep your details and a record of your consent, including your country, which we work out when you sign up. Each email carries a small tracking image that shows whether you opened it, and we record which links in it you click, and when. If you don't confirm, we delete the request after 48 hours. If you unsubscribe, we delete your details and click history after 24 months, keeping only what stops us emailing you again. An email delivery service and a bot check on the sign-up form handle your details on our behalf. Every Reel has a link to change your genres or unsubscribe, and you can use the contact form to see or delete what we hold.
glu studio: what we hold
glu studio is invite-only while it's in beta. You sign in with Google, Discord or an emailed link, and from then on the studio keeps a record of you and of what you make. Most of it is visible under My account, where you can also download it.
| What | Detail |
|---|---|
| Account and profile | Your email address. Your name and profile picture if you sign in with Google or Discord and use them. How and when you signed in. The date you confirmed you're 18 and which version of the terms you agreed to. Profile details you set. Your email choices, plus a dated log of each change |
| What you make | Prompts, scripts and settings, and the photos, video, audio and documents you upload, including voice recordings. What the studio generates from them |
| Credits, sharing and messages | A record of credits added, used, refunded and expired. The title, caption and file on any share page you create, and any report someone files about one. Your waitlist sign-up (email and name), credit requests and anything you send through the contact form |
| Ratings | A star rating and any comment you leave on a result, kept with that result's prompt and settings. We store and use them to improve the service |
| Technical | Your IP address and country, used for rate limits and abuse prevention and written into the audit record when something is deleted or purged. Error logs |
We use this to run your account, make and store what you create, keep credits straight, keep the studio secure and within its limits, answer you, and improve the studio, including by looking at how it is used (prompts and settings). We don't sell it.
AI generation and our AI provider
The images, video and voice in glu studio are made by AI models that our AI provider runs in Singapore. When you start a job, we send our AI provider what the job needs: your prompt and settings, any photos, video, audio or documents you attached, and for a product ad the text the script is written from.
So your content leaves Australia. Our AI provider handles it under its own terms and privacy policy, and its automated content checks can refuse a request. We use only its Singapore service, and you can ask us through the contact form how long it keeps inputs and outputs. Under the Australian Privacy Principles (APP 8) we have to take reasonable steps to make sure an overseas recipient handles your information properly, and in most cases we stay accountable if it doesn't. If you'd rather not send something to our AI provider, don't put it in a job.
Voice cloning
To use your own voice for a voiceover, you record or upload a short sample and tick a box saying it's your voice, or that the speaker has agreed. We store the recording in your files and send it to our AI provider to create a voice that only speaks lines you type. We keep a record of your consent: your account, the time and the version of the wording. A voice can be a biometric identifier, which the Privacy Act treats as sensitive information, so we only do this with your consent. Deleting a voice removes it from our AI provider and from our records. The original recording stays in your files until you delete that too.
Where your files live
Everything you upload, and everything glu studio makes for you, is stored with our hosting provider, Cloudflare. Each file has a long random address. Nobody can guess it, but anyone who has the address can open the file, because the address is the key, not a password. Share links work the same way, so share them only with people you're happy to have the file.
Who else receives data
| Who | What they get, and why |
|---|---|
| Our AI provider (Singapore) | Job content, as above. The sample clips and pictures on the studio's Explore and Skills pages load from a content delivery network run by the same provider, so it sees your IP address |
| Cloudflare | Hosting, storage and processing for the site and the studio, so it handles your requests, IP address and files. Cloudflare Turnstile on the contact page. Cloudflare Web Analytics outside the EU, UK and Switzerland |
| An email delivery service | Your email address and the email itself, to deliver sign-in links, waitlist confirmations, other studio emails and the Reel |
| If you sign in with Google: your email, name and picture come to us, and Google learns you signed in to glu.tv. Google also runs our inbox, and GA4 on the directory | |
| Discord | If you sign in with Discord: your Discord id, email, name and picture come to us |
Each of them handles data under its own privacy policy. Beyond this we share nothing, except where the law requires us to hand something over.
Where your data goes
Your data goes to Singapore (our AI provider) and to the United States and other countries where the companies in the table above operate. Cloudflare runs a global network, so your data may be handled in many countries. We are reviewing the safeguards for these transfers.
Cookies and browser storage
| Where | What it does | How long |
|---|---|---|
| glu studio | Sign-in cookies: keep you signed in, hold a verified sign-in until you confirm your age and the terms, and protect the Google and Discord sign-in step | 30 days (restarting each time you use it), 15 minutes and 10 minutes |
| glu studio | A random identifier for your browser, set when you sign in. A cached copy of your recent creations and menu state | 1 year. Until you clear site data |
| The directory | Your answer about analytics cookies | 12 months |
| The directory | The code of a shared link or email you arrived through, so we can count which links bring people in. It is a code for the link, not for you | That visit |
| The directory | How often you've visited and watched, and when you said "not now" to adding glu.tv to your home screen | "Not now" lasts 90 days; the rest until you clear site data |
If you add glu.tv to your home screen, a service worker keeps copies of the site's pages and fonts on your device so they open quickly. It holds no account details and doesn't track you. None of this is used for advertising or to follow you across other sites. The analytics cookies listed under Traffic are separate and follow your choice.
Emails
We email you what is needed to run your account, such as sign-in links, invites and replies, and notifications about your own account that you've switched on. We send marketing email (news, tips, new skills) only if you tick the box when you sign up or switch it on under My account, Notifications; the box is not ticked for you. Every marketing message will carry an unsubscribe link. Our emails carry a small tracking image that shows whether they were opened, and studio emails record whether links in them are clicked. The Reel is separate and described under The Reel: a weekly email.
Our team chat gets a notice when you join the waitlist, sign in, ask for credits or leave a rating, including your name and anything you wrote. Your email, location and IP address aren't sent.
Credits and payments
During the beta we add credits to accounts ourselves, and nothing is sold, so we hold no payment details. Before credit packs open we'll update this page to name the payment provider and say what it receives. We'll keep the credit records, and for purchases the records that tax law requires us to keep.
How long we keep things
| What | How long |
|---|---|
| Accounts and what you make | Until you delete them |
| Things you delete | A creation, film, library item or share link you delete is kept for 30 days, in case of accident or a legal request, then purged. A share page you delete stops working at once |
| Your whole account | Deleting it hides your profile, creations, films, saved items and library straight away, and you can restore everything for 30 days. After that we permanently erase your sign-in record, files, any voice you cloned (also at our AI provider), choices and saved items. We keep your credit history for our accounts, with your identity removed so it can no longer be linked to you. For now, ratings, waitlist and invite records, email delivery logs and a record that the deletion happened can survive erasure. What our AI provider keeps of generation inputs and outputs is described under AI generation |
| Audit entries | Records that something was deleted or purged (ids and times, never your prompts or titles) are kept without an end date. The IP address and country on them are removed after 12 months |
| Credits | Beta credits expire 12 months after they're added |
| Contact form, directory analytics, the Reel | As stated in their own sections above |
If the law requires it, or there's a legal dispute, we can pause a deletion or an account erasure. Links you've already shared keep working until you remove them.
Age
glu studio is for people 18 or older, and you confirm that when you first sign in. We don't check ID. If we find an account belongs to someone under 18, we'll close it. The directory isn't aimed at children either.
Your rights
We handle personal information in line with the Australian Privacy Principles, whether or not the Privacy Act strictly applies to a business our size. You can ask what we hold about you, ask us to correct it, and ask us to delete it. In glu studio, My account, Privacy and data lets you download your profile, creations and files and delete your account yourself. Otherwise use the contact form and we aim to reply within 30 days. If you're unhappy with how we've handled your information, tell us first. If we haven't sorted it out, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
If you're visiting from the EU, the UK or Switzerland, you can change your analytics choice with "Cookie settings" at the foot of any page. The GDPR and UK GDPR also give you the right to access, correct, erase, restrict and move your data, to object to how we use it, to withdraw consent, and to complain to your local data protection authority (in the UK, the Information Commissioner's Office).
| Why we use your data | Basis (GDPR and UK GDPR) |
|---|---|
| Running your account, making and storing what you create, credits | Contract: it's the service you asked for |
| Voice cloning, and optional emails | Consent, which you can withdraw at any time by deleting the voice or switching the email off |
| Security, preventing abuse, fixing faults, improving the studio | Legitimate interests |
| Directory analytics | Consent in the EU, UK and Switzerland. Elsewhere, our legitimate interest in knowing what gets watched |
| The Reel | Consent, as set out in its section |
| Tax and accounting records, and legal requests | Legal obligation |
Changes to this page
When this page changes in a way that matters, we'll update the date at the top and tell glu studio members and Reel subscribers.