This privacy policy explains what GLM Chat (glm-ai.chat, “we”, “us”) collects when you use the site and its free chat, where your messages go, and the choices you have. The short version: you do not need an account, our server does not store your conversations, and your chat history stays in your own browser.
Effective date: September 24, 2026.
Privacy policy summary
- No sign-up. We do not ask for your name, email address or any other account details to use the chat.
- Your messages pass through our server to Z.ai’s API so a GLM model can answer. Our server does not keep the text.
- Your conversations are saved only in your browser’s local storage, up to 30 of them, and you can delete them at any time.
- We use one cookie with a random browser ID, combined with a salted one-way hash of your IP address, to enforce the daily chat limits.
- We keep anonymous usage counters that do not identify you.
- If advertising or analytics are enabled, Google AdSense and Google Analytics 4 may set cookies, with your consent where the law requires it.
What happens when you send a message
- Your browser sends your new message to our server, together with up to the last 20 messages of the same conversation, trimmed to 24,000 characters, so the model has context.
- Our server forwards that text to the API of Z.ai (formerly Zhipu AI), the company that makes the GLM models, along with the model you picked.
- Z.ai’s model generates a reply, which our server passes back to your browser.
- Our server does not write the content of your messages or the replies to a database or log file.
Images you upload. The chat accepts JPEG, PNG and WebP images up to 4 MB when you use GLM-5.3-Flash. An uploaded image travels the same way as text: from your browser to our server, then to Z.ai’s API. We do not store it.
Images you generate. When you use GLM-Image, your prompt is sent to Z.ai’s image generation API. Z.ai returns a link to the generated image, which your browser then loads from Z.ai. Z.ai describes this link as temporary; it expires after 30 days. Use the download button if you want to keep the image.
Z.ai’s processing. Once your message reaches Z.ai, Z.ai processes it under its own terms and privacy policy, which you can read at docs.z.ai/legal-agreement/privacy-policy and docs.z.ai/legal-agreement/terms-of-use. What we send is what the model needs to answer: the conversation text or image, the model you picked and the chat settings.
Because your words leave your device, do not type passwords, API keys, payment details, health information or other people’s personal data into the chat. The terms of service say the same.
What we store on our server
| Data | Stored? | Details |
|---|---|---|
| Message and reply text | No | Passed to Z.ai and back, never saved |
| Uploaded images | No | Passed to Z.ai, never saved |
| Image prompts | No | Passed to Z.ai, never saved |
| Usage counters | Yes | Anonymous totals per model per day |
| Rate-limit counters | Yes | Daily counts tied to a random ID and an IP hash |
Anonymous usage counters. We count things like the number of requests and tokens per model per day. These totals describe the whole site, not any person, and contain no message content.
Rate-limit counters. To apply the daily limits (for example 40 messages per day on paid models and 3 generated images per day), our server keeps daily counters linked to your random browser ID and to a salted hash of your IP address. A salted hash is a one-way scramble: it lets us recognize the same visitor within a day without storing the IP address itself, and it cannot be reversed to reveal the address.
What is stored in your browser
Chat history. Your conversations are saved in your browser’s local storage, up to 30 of them, so you can come back to them later on the same device and browser. They never leave your device except when you send a new message, as described above. We cannot see them, and they are not synced anywhere. You can delete conversations in the chat’s history panel, or remove everything by clearing this site’s data in your browser settings. A private or incognito window discards them when you close it.
Rate-limit cookie. The chat sets one cookie containing a random browser ID. It carries no personal details and exists only so the daily limits work fairly. If you delete it, a new random ID is created on your next visit.
Cookies and similar technologies
| What | Set by | Purpose | When |
|---|---|---|---|
| Rate-limit cookie | GLM Chat | Random browser ID for daily limits | When you use the chat |
| Local storage | GLM Chat, in your browser | Saves your conversations | When you chat |
| Advertising cookies | Google AdSense | Serve and measure ads | Only if ads are enabled |
| Analytics cookies | Google Analytics 4 | Count visits and page views | Only if analytics are enabled |
Where the privacy laws that apply to you require consent for advertising or analytics cookies, those cookies are set only after you give it, and you can change your choice later.
Advertising and analytics by Google
GLM Chat is free and is funded by ads. When advertising is enabled, Google AdSense may use cookies to show ads, including ads based on your interests where that is permitted, and to measure how ads perform. When analytics is enabled, Google Analytics 4 helps us understand which pages are read and how visitors move around the site, in aggregate.
Google processes this data under its own policies. You can learn more and control it here:
- How Google uses information from sites that use its services
- Google Privacy Policy
- My Ad Center, where you can turn off personalized ads
- Google Analytics opt-out browser add-on
Advertisers never receive your chat messages. Ads are placed around our pages and have no access to the chat.
Server logs
Like almost every website, GLM Chat runs on infrastructure provided by our hosting and CDN providers. To deliver pages and protect the site against attacks and abuse, these providers process standard technical data about each request, such as the IP address, the time, the page requested and the browser’s user agent. These logs are kept for a limited period under the providers’ own security and retention practices. They do not contain the text of your chat messages.
Why we use this data
- To provide the chat: sending your message to Z.ai and returning the reply.
- To keep the chat free and fair: applying the daily limits and preventing abuse.
- To keep the site secure and working: server logs and anonymous counters.
- To fund and improve the site: advertising and analytics, with consent where required.
We do not sell your personal data, and we do not use your chat messages to profile you or to train any model.
Who receives data
- Z.ai receives the content you send in the chat, as described above.
- Our hosting and CDN providers process technical request data to run the site.
- Google receives data through AdSense and Analytics 4 cookies, if those services are enabled.
- Authorities, only if the law requires it. Because we do not store conversation text, we have none to disclose.
How long data is kept
Message text, uploaded images and image prompts are not kept by us at all. Rate-limit counters are daily counters. Anonymous usage totals are kept as site statistics. Your chat history stays in your browser until you delete it. Cookies set by Google follow Google’s own retention periods.
Children
GLM Chat is not directed at children under 13, or under the minimum age for using online services without parental consent where they live. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, for example by email, contact us and we will delete it.
Your rights and choices
Depending on the privacy laws that apply to you, you may have the right to ask what personal data we hold about you, to have it corrected or deleted, to object to or restrict its use, and to complain to your data protection authority. Because we do not store your conversations and our counters are anonymous or hashed, we usually hold nothing that we can link back to you. We will still answer every request.
You also have direct control:
- Delete conversations in the chat, or clear this site’s data in your browser.
- Block or delete cookies in your browser settings. The chat still works, although a new random ID will be created.
- Turn off personalized ads in Google’s My Ad Center, and change your consent choices on this site where a consent option is shown.
If you email us, we use your email address and message only to reply and to handle your request.
Security
The site is served over HTTPS, so your messages are encrypted between your browser and our server. The API key that connects our server to Z.ai stays on the server and is never sent to your browser. IP addresses used for rate limiting are stored only as salted hashes. No system is perfectly secure, which is one more reason to keep sensitive information out of the chat.
Changes to this privacy policy
If we change how the site handles data, for example by adding a feature or a new service provider, we will update this privacy policy and its effective date before the change takes effect. The version on this page is always the current one.
Contact
For any privacy question or request, email info@glm-ai.chat or see the contact page. You can also read about GLM Chat, our disclaimer and our editorial policy, or go straight to the free GLM chat.