# GDPR compliance
**URL:** https://community.glideapps.com/t/gdpr-compliance/52383
**Category:** Ask for Help
**Created:** [October 24, 2022, 1:32am UTC](https://community.glideapps.com/t/gdpr-compliance/52383 "2022-10-24T01:32:29Z")
**Posts on this page:** 10
**Page:** 1
### Author:  [@alexlee](https://community.glideapps.com/u/alexlee)
#### Post date: [October 24, 2022, 1:32am UTC](https://community.glideapps.com/t/gdpr-compliance/52383/1 "2022-10-24T01:32:29Z")
I have not been able to find answers to the following from prior forum posts nor the published privacy policy.
1. In what jurisdictions is data processed in Glide apps? Does this include CDNs?
2. How are data deletion requests handled for Glide apps?
3. Do apps built with Glide gather proper explicit user consent? Including not just for cookies, but for broader privacy compliance including data processing.
Thank you.
---
### Author:  [@Simon\_Hill](https://community.glideapps.com/u/Simon_Hill)
#### Post date: [October 24, 2022, 9:39am UTC](https://community.glideapps.com/t/gdpr-compliance/52383/2 "2022-10-24T09:39:22Z")
1. The data is stored in NA. But GDPR applies to users in Europe and therefore applies if the App is used in Europe.
2. The deletion request (process to receive the request & action the request) needs to be managed by the owner of the App.
3. Depends on the settings in the App and is therefore controlled by the App owner. The App owner is responsible and accountable for specifying the settings and hence, ensuring compliance.
---
### Author:  [@alexlee](https://community.glideapps.com/u/alexlee)
#### Post date: [October 24, 2022, 4:02pm UTC](https://community.glideapps.com/t/gdpr-compliance/52383/3 "2022-10-24T16:02:33Z")
Thanks Simon.
1. Does this mean it is impossible to use Softr to build an app serving an EU audience, as all NA based data processing is [prohibited under GDPR](https://matomo.org/blog/2020/07/storing-data-on-us-cloud-servers-dont-comply-with-gdpr/), without explicitly requiring user consent?
2. How can Glide app owners ensure all data associated with a user is purged from Glide infrastructure?
---
### Author:  [@nathanaelb](https://community.glideapps.com/u/nathanaelb)
#### Post date: [October 25, 2022, 4:05am UTC](https://community.glideapps.com/t/gdpr-compliance/52383/4 "2022-10-25T04:05:45Z")
1. [Glide and user privacy](https://community.glideapps.com/t/sad-but-now-happy-story-lost-8-projects-over-gdpr-issues-new-feature-added/10944/142)
2. I think we might be able to assume that in the current state of the Web, if we do not own and control the servers where the data is being processed, we cannot be 100% certain what actually happens with the data.
---
### Author:  [@Simon\_Hill](https://community.glideapps.com/u/Simon_Hill)
#### Post date: [October 25, 2022, 8:40am UTC](https://community.glideapps.com/t/gdpr-compliance/52383/5 "2022-10-25T08:40:06Z")
1. No it is not impossible since you could develop an App that did not store personal data.
As a reminder, the principle of GDPR is that **you need the permission of the user** to store (safely) and use their information (for clearly defined purposes) plus you need a mechanism that allows you to respond to a request to delete the information in a timely fashion. All of which is completely manageable depending on how you design the App. Hence, with due diligence most Apps are possible.
1. If a user request is received then the owner must have a process to delete the user’s data, a task that is abundantly clear for experienced App developers.
---
### Author:  [@nathanaelb](https://community.glideapps.com/u/nathanaelb)
#### Post date: [October 25, 2022, 9:43am UTC](https://community.glideapps.com/t/gdpr-compliance/52383/6 "2022-10-25T09:43:54Z")
@alexlee
> [@alexlee](#):
>
> 1. Does this mean it is impossible to use Glide to build an app serving an EU audience
You should be able to develop a project on Glide and be reasonably comfortable that you are doing so according to EU regulations. Up to you to comb through the legal information provided by Glide and decide for yourself if the terms and conditions work for you:
- [Glide Terms of Service](https://www.glideapps.com/legal/terms) (see section 4)
- [EU and UK Data Processing Addendum](https://www.glideapps.com/legal/dpa)
- [Privacy policy](https://www.glideapps.com/legal/privacy) (see the section called European Union Data Subject Rights)
> [@alexlee](#):
>
> 1. How can Glide app owners ensure all data associated with a user is purged from Glide infrastructure?
As I said above, I would argue that you cannot _actually_ guarantee that all the data associated with a user is purged from Glide. Currently, you can only trust Glide – and other online service providers for that matter – that they are indeed deleting the data, but that is anyone’s guess. This point of view might be a little cynical.
For a more practical approach, this is how you would delete all the data associated with a user within your Glide project:
- Head over to “Settings \> Data”
- Delete the user’s data there by entering their email.
---
### Author:  [@Aymeric\_de\_Maussion](https://community.glideapps.com/u/Aymeric_de_Maussion)
#### Post date: [October 25, 2022, 10:13am UTC](https://community.glideapps.com/t/gdpr-compliance/52383/7 "2022-10-25T10:13:45Z")
@Marc-Olivier knows very well GDPR maybe he can help you 🙂
---
### Author:  [@alexlee](https://community.glideapps.com/u/alexlee)
#### Post date: [October 25, 2022, 4:01pm UTC](https://community.glideapps.com/t/gdpr-compliance/52383/8 "2022-10-25T16:01:23Z")
The issue is that as soon as you have any email registration, you have collected personal data.
The 2020 ruling prohibits data processing in the US, which is where Glide processing happens, according to the DPA.
At the same time, it is impossible to add a consent model to Glide apps, AFAICT.
This implies that every Glide application is in violation of GDPR…
---
### Author:  [@david](https://community.glideapps.com/u/david)
#### Post date: [October 25, 2022, 4:06pm UTC](https://community.glideapps.com/t/gdpr-compliance/52383/9 "2022-10-25T16:06:45Z")
You can add your own user agreement that blocks on a checkbox:
---
### Author:  [@nathanaelb](https://community.glideapps.com/u/nathanaelb)
#### Post date: [November 12, 2024, 12:54am UTC](https://community.glideapps.com/t/gdpr-compliance/52383/10 "2024-11-12T00:54:34Z")
More and more I’m being asked if Glide is GDPR compliant. My answer is usually something like “Yes it is, here are the links”, and I send people to Glide’s GDPR or data security pages.
I’d like to offer a better experience to those who ask.
What I’m imagining is a table/chart with a list of criteria that Europeans are looking out for, a column that would indicate if Glide complies for that criteria, and then another column with a very short explanation.
I am not doubting that Glide is GDPR compliant, but the sentence “Yes, Glide is GDPR compliant” is proving to be insufficient at times, and I’m having to improvize.
_Would anyone here who’s knowledgable about the topic be interested in helping put something together that easily answers the questions?_ Once the work is done, we could share it here in the forum.
Just asking in case. I’ll be looking into this this week.
@Krivo @Marc-Olivier