Skip to main content
P Sanctuary v1 Back home
Legal · 10

Privacy policy.

What we collect, why, how long we keep it, and how to get it back. The short version: we keep what we need to run the service, nothing more, and you can delete your account at any time.

Last updated 6 June 2026 5 min read GDPR-aligned

01 · What this policy covers

This policy describes the personal data we collect when you use Prompt Sanctuary, why we collect it, how long we keep it, and the choices you have. It applies to all properties we operate under this brand, including the public site, the in-product pages, and any APIs that talk to the same backend.

It does not cover third-party sites we link to. Those sites have their own policies.

02 · What we collect

We aim to collect the minimum data needed to run the service. Specifically:

Account data

  • Username — required. Visible in the community library for prompts you share.
  • Email address — optional. Used only for security alerts (for example, password change notifications). Never shared.
  • Password — stored as a one-way hash (bcrypt). We cannot recover it for you; if you lose it, you reset it.

Content data

  • Prompts you save — stored in your personal library, searchable by you, deletable by you.
  • Prompts you share — also visible in the community library while shared. Unsharing removes them from public view.
  • Refinement history — every version of a prompt you refine, so you can roll back. Deletable with the prompt.

Usage data

  • Points ledger — credits earned, spent, and forfeited, with timestamps and the reason. Drives the in-product history view.
  • Achievements — which achievements you have unlocked, and when.
  • Sessions — a list of active login sessions (browser, IP, last active time). You can revoke any of them.

Optional data

  • API key — if you choose to add a Google Generative AI key, it is stored encrypted at rest and used only to make generation requests on your behalf. You can remove it at any time.
  • Feedback messages — any text you submit through the in-product feedback form, plus your username as attribution.

Technical data

  • Server logs — standard HTTP request logs (IP, user agent, status code, route) for security and abuse detection. Retained for a rolling 30 days.
  • Rate-limit counters — temporary counters that prevent abuse; not personally identifying.

03 · How we use it

We use the data we collect only to:

  • Authenticate you and keep your account secure.
  • Run the generator, refinement, and library features you ask for.
  • Display prompts you choose to share, in the community library.
  • Prevent abuse, debug issues, and keep the service running.
  • Comply with legal obligations.

We do not sell your data. We do not use your prompts to train advertising models. We do not share your data with third parties except as described in section 05 below.

04 · Cookies and sessions

The service uses one essential session cookie to keep you signed in. It is an HTTP-only, signed cookie scoped to our domain, and it is removed when you sign out. We do not set advertising or cross-site tracking cookies.

Some cookies may be set by upstream services such as Google Fonts when the page loads. Those are governed by the upstream provider's policies.

05 · Third-party processors

To run the service we share the minimum necessary data with the following processors:

  • Google Generative AI — receives the prompts and context you submit when you click Generate or Refine. See Google's Generative AI terms and privacy policy. If you supply your own API key, requests are billed to that key and processed under your account with the provider.
  • Google Fonts — used to render typography. Receives your IP and user agent for each request.
  • Hosting provider — the infrastructure we run on. Receives the standard HTTP request data needed to deliver responses.

We do not engage advertising networks, analytics platforms that fingerprint visitors, or social-login services.

06 · How long we keep data

  • Account data — kept while your account is active. Deleted within 30 days of account closure, except for records we must keep by law.
  • Prompts and refinement history — kept while you keep them. Deleting a prompt deletes its history.
  • Points ledger — kept while your account is active. Useful for showing your history; deleted with the account.
  • Feedback messages — kept indefinitely in de-identified form to inform product decisions, unless you ask us to remove yours.
  • Server logs — rolling 30-day retention.
  • Backups — encrypted daily snapshots kept for 14 days. Personal data in a backup is purged when the backup ages out.

07 · Your rights

You can do all of the following from the in-product profile page, or by contacting us:

  • Access — see the data we hold about you.
  • Correct — change your username or email.
  • Delete — delete any individual prompt, refinement version, or your entire account.
  • Export — request a copy of your data in a portable format.
  • Revoke sessions — sign out active sessions from your profile.

If you are in the EEA, the UK, or California, you have additional rights under local law — including the right to object to processing, restrict processing, and lodge a complaint with your local data protection authority. We honor those rights globally.

08 · Security

We protect your data with reasonable technical and organizational measures:

  • Passwords are hashed with bcrypt.
  • API keys are encrypted at rest.
  • All authenticated routes require a valid session and CSRF token.
  • Database files are protected with file-system permissions inside a container that does not expose its internals to the network.
  • HTTPS is required in production; the development server is for local use only.

No system is perfectly secure. If we ever discover a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

09 · International transfers

The service may be operated from a data center in a different country from where you are. By using the service, you understand your data may be transferred to, stored, and processed in that country. Where required, we use standard contractual clauses or rely on the provider's equivalent safeguards.

10 · Children

The service is not directed to children under 13 (or under 16 in the EEA / UK). We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will close it.

11 · Changes

We may revise this policy to reflect changes to the service, the law, or our practices. The "Last updated" date at the top will always reflect when the current version took effect. For material changes, we will make reasonable efforts to notify you. Continued use of the service after a change indicates acceptance of the revised policy.

12 · Contact

For any privacy question, request, or complaint, contact us through any of these channels:

This document is intended to be readable. If anything is unclear, please tell us — we will rewrite the relevant section.