Privacy notice
Last updated: 13 October 2026
Account and creator information
We store your email, display name, password hash, sessions, verification/reset token records, and any creator profile you submit. Public creator profiles and approved listings are visible to other visitors. Drafts and private packages require authorised access.
Resources and activity
We store submissions, version history, examples, licenses, moderation decisions, saved resources, likes, reviews, reports, support inquiries, and access records. Do not submit confidential data or credentials in prompts or examples.
Voluntary resource trials
With your agreement, we save the resource and instruction revision, assistant choice, task-completion answer, usefulness, correction-effort and optional language ratings. No account, task text or work files are required. These ratings are reviewed by administrators to improve resources. The form is separate from optional analytics; security rate limits still apply.
Scanning and AI generation
The structure scan runs locally in your browser without sending or saving the text on our server. If you use the separate AI generation feature when enabled, your submitted query is sent to the configured AI provider through OpenRouter. Provider terms apply; avoid sensitive inputs.
Cookies and analytics
A session cookie keeps you signed in. Your browser also remembers your theme and analytics choice. Optional analytics requires consent and may record page views, search actions without the search text, button and link clicks, search-result counts, copy and toolkit-save outcomes, basic error categories, builder completion, and inquiry submission. Click logs contain control types and public route families, not button text or form values. Prompt inputs and email addresses are not included in these events. Use the Privacy settings button on any page to change analytics consent; declining also removes the analytics visitor identifier. Consent-based analytics events are deleted after 365 days. Security rate limits operate regardless of analytics consent and store hashed request identifiers and counters.
Service providers
Vercel hosts the application, Neon stores database records, and Hostinger provides the official support mailbox. Hostinger is configured for transactional email and Vercel Blob for private object storage. Payment processing is not open yet; when enabled, payment credentials belong with the payment provider, not in messages to us.
Workflow requests
We store your submitted email, task description, optional contact details, referring page path, reply consent and follow-up status. Active administrators can review requests in a private queue. Request details are not posted publicly.
How information is used
Information supports account access, resource delivery, moderation, fraud prevention, responding to inquiries, and operating the platform. We do not sell personal information. A public resource you publish may be copied according to its license.
Retention and requests
Account, content, security, and transaction records are kept as needed to operate the service, handle disputes, and meet applicable obligations. Analytics events are deleted after 365 days. The retention worker also removes expired sessions, email tokens, and rate-limit buckets. Contact us to request access, correction, or deletion. We may need to verify ownership and explain records that must be retained. There is no self-service deletion tool yet.
Your choices
Choose Allow analytics or Decline analytics in the banner, then use Privacy settings on any page to change your choice later without clearing other cookies or signing out. Unmatched browser searches are only added to the public creator opportunities board after you check the explicit sharing option before searching. The summary is sanitized, but review it and leave out names, addresses, and confidential details. Do not publish information you want to remain private.
For privacy questions, contact hello@yourprompt.in. Contact details