Privacy & terms

Updated 20 October 2026. Glocker is run by Noufal Ibrahim, India. Contact: support@glockerapp.com.

This page covers the website and the hosted dashboard (glockpeek). The glocker agent runs on your machine and sends us nothing unless you turn on sync. If you run glockpeek yourself, we receive nothing at all.

What we store

Account: your email, your password as an argon2id hash, sync tokens as hashes, and a login session cookie.
Synced activity (only with sync on): the content — URLs, keywords, domains, window titles, app names, unblock reasons — is encrypted on your device before upload. We hold only ciphertext and can’t read it. Stored unencrypted: timestamps, event types and uninstall reasons, counts, idle time, window counts, heartbeats, device names, and a keyed record ID used to avoid duplicates. These show when you were active, not what you did.
Accountability partners: if you set up digest emails, their addresses, so we can send them.
Your encryption key, locked with your passphrase. We can’t open it. If you lose the passphrase, the encrypted data is gone; we can’t reset it.
Payments: handled by Polar, the merchant of record. We never see card details.
Website visits: server logs with truncated IP addresses, browser type and referring page, kept 90 days. No cookies, no third-party analytics.

Nothing is sold, shared for advertising, or used to profile you.

Who else handles it

DigitalOcean (hosting, Bangalore), Mailgun (account and digest email), Polar (payments).

Deleting your data

Email support@glockerapp.com and your account and synced records are deleted within 30 days. Your local logs stay on your machine.

Terms

The agent is open source under its licence; these terms cover only the hosted service.
Glocker supports your own intentions. Someone with root on their own machine can get around it, and it guarantees no particular outcome.
The hosted service is provided as is, without an uptime guarantee.
Paid plans renew until cancelled. Cancel any time and keep access to the end of the period. Payments aren’t refunded.
Don’t access other people’s accounts, overload or probe the service, or resell it. Accounts that do may be suspended.
Our liability is limited to what you paid in the previous 3 months.
Indian law applies.
Changes are posted here; significant ones are emailed to you.