Privacy Policy

PromptForge is built privacy-first. This policy explains exactly what we collect, why, and what we never do. It's written in plain language deliberately.

The short version

• Our free tools run entirely in your browser. Text you paste into the token counter, JSON formatter, prompt builder or any other tool is never transmitted to us or anyone else.
• We collect an email address only if you create an account or subscribe to the newsletter.
• We do not sell, rent or share your personal data with third parties for marketing.
• You can delete your account and all associated data at any time.

What we collect

Account data. If you sign up: your name, email address, and a securely hashed password (or a Google account identifier if you use Google sign-in). We never see or store your Google password.

Learning data. Course progress, completed lessons, streaks and XP — used to show your progress and nothing else.

Content you create. Notes in the AI Brain, installed skills, and bookmarks. This is yours; we do not read, analyse or train anything on it.

Usage analytics. Aggregated, anonymised page views and tool usage so we know what to improve. No cross-site tracking, no advertising profiles.

Messages. If you use the contact form, we keep your message and email so we can reply.

What we never collect

Content you paste into any tool. API keys you enter (these are stored in your browser's local storage and sent directly to the relevant provider — never to us). Payment card details (handled entirely by our payment processor). Your location beyond the country level implied by your IP.

Local storage

Much of PromptForge works without an account by storing data in your browser's local storage — progress, notes, tokens, preferences. This data never leaves your device and is cleared when you clear your browser data.

Third-party services

• Supabase — database and authentication for accounts.
• Google Sign-In — optional authentication.
• Cloudflare Turnstile — bot protection on sign-up forms. Privacy-preserving by design; no behavioural tracking.
• GitHub API — used when you browse the skills marketplace. Requests go from your browser directly to GitHub.
• Hugging Face — used in the Playground when you supply your own token. Prompts go from your browser directly to Hugging Face.

Your rights

You can access, correct, export or delete your data at any time. Email us and we will action deletion requests within 30 days. If you're in the EU or UK, you have these rights under GDPR; if you're in California, under CCPA. We apply the same standard to everyone regardless of location.

Data retention

Account data is kept while your account is active. Delete your account and it is removed within 30 days. Anonymised analytics may be retained indefinitely as they contain no personal identifiers.

Children

PromptForge is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

Changes

If we change this policy materially, we'll update the date above and notify account holders by email. Continued use after a change means acceptance.