GLASSBOX — Privacy Policy

Last updated: July 10, 2026

GLASSBOX is built so you can watch cryptography work. In the same spirit, this policy is short and honest. We do not sell your data, we do not track you across apps or websites, and there are no ads or accounts.

What stays entirely on your device

All cryptographic computation runs locally. Any text, keys, or passwords you type into GLASSBOX — and every intermediate value the app visualizes — are processed on your device and are never transmitted to us or anyone else.

Sensor data (Entropy Forge)

If you use the Entropy Forge, the app may sample brief physical sensor noise as a source of randomness:

• Motion (accelerometer/gyroscope jitter)
• Microphone (ambient hiss)
• Camera (sensor noise from a single frame)

The raw motion, audio, and image data is discarded immediately after sampling — only whitened random bits are kept. None of it is stored or transmitted. Each source is optional; if you deny a permission, that source simply contributes zero and the app works fine.

iCloud sync

GLASSBOX's persistent learner ("Hermes") can sync its accumulated learning data — cracked-hash library, model checkpoints, and progress — across your own devices using Apple CloudKit. This data is stored in your private iCloud database, governed by Apple's privacy policy. We have no access to it and it is never shared with us or third parties. Sync is only active on a signed-in device.

Diagnostics & crash reporting

To keep the app stable, GLASSBOX uses Sentry to collect anonymous diagnostic information: crash reports, performance metrics, and diagnostic snapshots/session replays.

• This data is not linked to your identity — we do not send user identifiers or IP-based personal data, and no data is used for tracking.
• Screens where you type sensitive content (plaintext, keys, passwords) are excluded from diagnostic screenshots, and session replay masks on-screen text by default.

Sentry processes this data as our service provider. See Sentry's privacy policy.

Data we do NOT collect

• No name, email, phone number, or contacts (unless you choose to email support).
• No advertising identifiers and no cross-app/website tracking.
• No location data.

Children

GLASSBOX is rated 4+ and is suitable for all ages. It does not knowingly collect personal information from children.

Changes

If this policy changes, we will update this page and revise the date above.

Contact

Questions about privacy? Email support@quantumlounges.org.