Privacy

Last updated: 2026-05-05.

What Glint sees

Glint reads live status from your GL.iNet router over an SSH session you authenticate with your own ed25519 key. It runs ubus / logread / ping commands and renders the response in the app. No telemetry of your activity is collected.

What leaves your devices

• SSH — directly from your Mac / iPhone / iPad to your router. We never see this traffic.
• iCloud KVS — your settings (endpoints, ping host list, accent, refresh cadence, Live Activity field selection) sync between your own Apple-ID-paired devices via Apple's NSUbiquitousKeyValueStore. We don't have access.
• APNs relay (if push enabled) — the optional glintd daemon, which you install yourself, sends push payloads to glint.nakitel.com/apns/v1/push. We forward them to Apple, log only the event id + token count + result, and drop the payload body. We never store your router's metric history; only the daemon does, on your router.

Companion daemon (glintd)

Open-source, MIT-licensed, runs entirely on your router. The 24 h history ring buffer lives in a SQLite file at /tmp/glintd.db + a snapshot at /etc/glintd/state.db on your device. Uninstall deletes both.

Contact

[email protected]