Privacy Policy

Last Updated: November 6, 2025

Introduction

PromptForge ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle data when you use our AI prompt engineering platform at craftprompts.io.

Data Collection

What We DO NOT Collect

We DO NOT collect or store your prompts on our servers
We DO NOT create user accounts or store personal information
We DO NOT track your behavior across other websites
We DO NOT sell or share your data with third parties

What We Collect

Anonymous Analytics: We use Ahrefs Web Analytics to collect basic, anonymized traffic metrics (page views, referrers, browser type). This data contains no personally identifiable information.
Browser Storage: All saved prompts and preferences are stored locally in YOUR browser using IndexedDB. This data never leaves your device unless you explicitly export it.

AI Processing

How Your Prompts Are Processed

When you use our AI-powered tools (prompt generator, optimizer, image analyzer), your content is sent to OpenAI's GPT-5-nano model via Vercel AI Gateway for processing
Your prompts are sent to OpenAI for processing but are NOT stored by us
We do not log, save, or retain any prompts sent through our AI features
OpenAI processes requests according to their own privacy policy. See: https://openai.com/policies/privacy-policy
OpenAI's API does not use submitted data to train their models (per their API data usage policies)

Vercel AI Gateway

We route all AI requests through Vercel AI Gateway for:

Rate limiting and cost management
Request monitoring (anonymous request counts only)
Error handling
No prompt content is logged by Vercel or us

Local Data Storage

Browser Storage (IndexedDB)

All your saved prompts, folders, and preferences are stored in YOUR browser's IndexedDB
This data is completely local and private to your device
We cannot access, view, or retrieve this data
Clearing your browser data will delete all saved prompts
You can export your data anytime from the "My Prompts" section

No Server-Side Storage

We intentionally do not store user data on our servers
All functionality works entirely in your browser after the initial page load
This "local-first" approach ensures your privacy and data ownership

Third-Party Services

Ahrefs Web Analytics

Purpose: Anonymous website traffic analysis
Data Collected: Page views, referrer information, browser type, country (approximate)
No Personal Data: Does not track individual users or collect personally identifiable information
More Info: https://ahrefs.com/privacy

Google Adsense

Purpose: Display relevant advertisements
Data Collected: May use cookies for ad personalization
Your Control: You can opt out of personalized ads via Google Ad Settings
More Info: https://policies.google.com/privacy

OpenAI (via Vercel AI Gateway)

Purpose: AI prompt generation and optimization
Data Collected: Only the specific prompts you submit for AI processing
Retention: Not stored by us; processed according to OpenAI's API policies
More Info: https://openai.com/policies/privacy-policy

Cookies

Essential Cookies

We use minimal cookies necessary for the website to function properly
These may include session management and preference storage

Third-Party Cookies

Ahrefs Web Analytics may set cookies for analytics purposes
Google Adsense may set cookies for ad serving

Your Control

You can disable cookies in your browser settings
Disabling cookies may affect some functionality

Your Rights

Data Access & Control

Access: All your data is in your browser's IndexedDB (accessible via browser dev tools)
Export: Use the export feature in "My Prompts" to download your data as JSON
Delete: Clear your browser data or use our in-app "Clear All Data" option
Portability: Your exported data can be imported into other tools or browsers

No Account, No Problem

Since we don't require accounts, there's no account data to request or delete
Your data belongs to you and stays on your device

Data Security

Client-Side Security

All data is stored locally in your browser's secure IndexedDB storage
IndexedDB is isolated per domain and cannot be accessed by other websites
Use HTTPS for all connections to protect data in transit

Server-Side Security

We use industry-standard security practices for our web servers
All connections use HTTPS encryption
Since we don't store user data server-side, there's minimal risk of data breaches

Children's Privacy

PromptForge does not knowingly collect information from children under 13. Our service is intended for general audiences. If you believe a child has provided information to us, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of PromptForge after changes constitutes acceptance of the updated policy.

International Users

PromptForge is hosted in the United States. If you access our service from outside the US, your data may be transferred to, stored, and processed in the US or other countries where our service providers operate.

GDPR Compliance (EU Users)

We are committed to GDPR compliance:

Lawful Basis: Legitimate interest (providing our service) and consent (for optional features)
Data Minimization: We collect only what's necessary (anonymous analytics)
Right to Erasure: Clear your browser data to remove all personal data
Data Portability: Export your data anytime
No Profiling: We do not use automated decision-making or profiling

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@craftprompts.io

Response Time: We aim to respond to privacy inquiries within 7 business days.

Summary (TL;DR)

✅ Your prompts stay in YOUR browser (IndexedDB) ✅ No user accounts required ✅ No tracking across websites ✅ AI processing via OpenAI API (not stored by us) ✅ Anonymous analytics only (Ahrefs) ✅ You own your data (export anytime) ✅ GDPR compliant

We believe in privacy-first design. Your data belongs to you, not us.