Privacy Policy
Effective October 20, 2026. GLO Law, operated by Eden Bound LLC.
The short version
GLO Law is free and works without an account. What you type into the search box, or into the box that asks what is going on, is used to answer you and is not written to any log or database we keep. We sell nothing, we run no advertising, and we hand nothing to a data broker. You can now make an account if you want one, but nothing on this site requires it, and searching stays anonymous whether you have one or not.
What you give us
- Search words, case names, and citations you enter into case search.
- The account of your situation you type on the Start page.
- Anything you choose to write in a feedback form, with the time you sent it.
- If, and only if, you choose to sign in: your name, your email address, and the account identifier Google gives us, from Google.
- If you are signed in and save something: a locked copy of your saved work that we cannot read (see Saved work).
That is the whole list. We never set a password, because we never handle one. No payment is taken on this site. The search pages carry a link to Eden Bound's Venmo for anyone who wants to chip in; if you use it, the payment happens on Venmo under Venmo's terms, and Venmo shows us the name on your Venmo account and the amount. The Android app shows no payment link.
If you make an account
Signing in is optional and Google is the only way to do it. Google tells us your name, your email address, and an identifier for your Google account, and we store those three things plus a session record that keeps you signed in for thirty days. Google learns that you signed in to GLO Law; it does not learn what you searched for. We do not use your email to market anything.
Having an account does not attach your name to your searches. Case search does not read who you are, and we still write no record of what you looked up.
Saved work
You can save a case, a search, a department policy, a rule or a statute, and a research packet you made. A saved case, policy, rule or search is only a pointer: opening it later looks the record up again, as it stands that day. A saved packet is kept as you made it.
If you are not signed in, what you save stays in this browser on this device, locked with a key the browser keeps, and nothing about it reaches us.
If you are signed in, your saved work is locked on your device before it is sent, and we store only the locked copy. We cannot read it. By default the key that opens it is kept in your own Google account, in a hidden folder of your Google Drive that only this site can use; your browser gets that key from Google directly, and it never passes through our servers. So we alone cannot read your saved work, and Google alone cannot either, but a court order served on both of us could. If you choose “Only me” on your account page instead, nothing goes to Google: the key is opened by a recovery code you keep, and if you lose that code and every device you use, nobody can open your saved work, us included.
What we can see, and what a subpoena to us could reach: that your account has saved work, how large it is, which of the two ways it is locked, and when it last changed. Not what is in it.
What this does not protect against: someone who can unlock a device you use, and the limit every website shares, which is that the code that locks your saved work is sent by our server. We do not ship a change that would weaken that, but a website cannot prove that to you.
You can delete your saved work on your account page at any time; deleting your account deletes it too. The key in your Google Drive opens nothing once the saved work is gone, and you can remove it yourself in your Google account's settings under the apps connected to your Drive.
Keeping it fair, and counting how much it is used
So that one person cannot use up the service for everyone, the server turns the address your connection comes from (on this website) or your sign-in (in an AI app) into a scrambled code that cannot be turned back into either. It uses that code to slow down anyone making a very large number of searches in a minute, and to count, for each day, how many different people searched and how many searches they made. Only those daily totals are written down. The codes are kept in memory for one day and never stored, and they are never linked to what you searched for.
Delete your account yourself on your account page, or ask us atinfo@glolaw.org and we will delete it. Either way the permissions described below go with it.
Connecting an AI application
GLO Law can be searched by an outside program acting for you, such as an AI assistant. That connection is off unless you approve it: the program sends you to a page on this site that names it and lists what it is asking for, and nothing is granted unless you press Approve. Refusing sends it away with nothing.
When you approve, we store which program you approved, what you approved it for, and when. The program receives a time-limited key that works only against our case-law search service and nowhere else. It does not receive your Google credentials, your password, or the feedback you have sent us, and it cannot file anything or act in any court. What that program then does with your searches on its own side is governed by its privacy policy, not ours.
Disconnect it yourself on your account page, or write toinfo@glolaw.org and we will remove it. A search key the program already holds keeps working for up to an hour after that, because those keys cannot be recalled early.
What our hosting records
The site runs on Vercel, and traffic to the search corpus passes through Cloudflare. Both keep ordinary web server records for their own operations and security: IP address, time, the page requested, and the browser string your device sends. We do not join those records to anything you type, and we do not control how long each company keeps them. Their own published privacy policies govern that.
Where your words actually go
Case search and the Start page reach two pieces of software we run ourselves on hardware we control: a search service and a text-embedding service. No other company sees that text, and neither service writes your query to a log file.
One exception. The document-packet step can send a scrubbed copy of your description to Anthropic so a model can draft a search string from it. Structured identifiers such as case numbers, dates, and addresses are removed before it leaves. The scrubber does not remove personal names, so leave names out if you would rather not send them. Nothing is stored on our side and the reply goes straight back to your browser. When that step is switched off, no text you write leaves our machines at all.
What we keep, and for how long
- Search words: not stored.
- Your description of your situation: not stored by us. It stays in your browser while you work and is gone when you close the page.
- Feedback you send: kept until you ask us to delete it.
- Account details, if you made one: kept until you ask us to delete the account. Sign-in sessions expire on their own after thirty days.
- Permissions you gave a connected application: kept until you revoke them or delete your account.
- Saved work, if you are signed in and save something: kept, locked so we cannot read it, until you delete it or your account.
- Hosting records: held by Vercel and Cloudflare under their own retention periods.
What we never do
We do not sell or rent what you write. We do not use it to advertise to you. We do not use it to train any model of our own. We do not give it to an employer, a landlord, a supervising officer, or a court unless the law compels us and we have no lawful way to refuse.
If you are on supervision or in a custody dispute
Eden Bound LLC is a small company with no special power to resist legal process. A subpoena, court order, or warrant can reach anything that exists. Our answer is to keep almost nothing, so that what your searches said is never written down and cannot be handed over. What our hosting providers record is outside our control. If you are worried about one specific person learning that you used this site, use a device and a network you control, and remember that your browser keeps its own history.
Deleting your account
Signed in, open your account page and press Delete my account. It happens at once, on the website and in the Android app alike. Or write toinfo@glolaw.org from the email address you signed in with and ask us to delete your GLO Law account; you do not need the app or an account to ask. Either way we delete your name, email address, Google account identifier, sign-in sessions, every permission you gave a connected application, and your saved work, and we write back when it is done. Ask in the same email if you also want feedback you sent deleted. Records Vercel and Cloudflare hold are outside our control, as described above.
The Android app
GLO Law's Android app opens this same website in your phone's browser, when that browser supports it (Chrome and Brave do; Google calls this a Trusted Web Activity). It collects nothing the website does not. It asks for no access to your contacts, location, camera, microphone, or files, and it sends no notifications. It keeps no copy of any search or record on the phone unless you save one (see Saved work); the only page it stores is the one that says you are offline. Google Play records that you installed it, under Google's own privacy policy.
Cookies
We set no advertising or tracking cookies, and nothing here follows you to another site.
Children
GLO Law is built for adults. We do not knowingly collect anything from a child under 13.
Changes to this policy
Saved work went live on the date above, and this page changed in the same release that shipped it, as it did for accounts and connected applications before it. We do not add a feature first and describe it afterward.
Contact
Write to info@glolaw.org with any question about this policy, or to ask us to delete feedback you sent.
The rules for using GLO Law are in the Terms of Use.