Privacy Policy

Last updated: December 6, 2025

Introduction

This Privacy Policy describes how we handle your information when you use our website. Your privacy is important to us, and we are committed to protecting it.

Information We Collect

Information You Provide: We do not actively collect personal information through our website. If you contact us via email, we will only use the information you provide in your email message to respond to your inquiry.

Information Collected Automatically: Like most websites, we may automatically collect non-personally-identifying information that web browsers make available, such as browser type, language preference, referring site, and the date and time of your visit. This information is used for analytics and to improve our service.

Device Identification: We may collect a unique device identifier to help us understand how our service is used and to provide a consistent experience across sessions. For abuse prevention, we may also collect hashed IP addresses.

Prompt Submissions: When you submit prompts to our Prompt Database, we collect and store: (1) The prompt content (text), (2) Associated metadata such as tags, language, type (Text/Image/Video), (3) Voting data (upvote/downvote) and submission statistics, (4) Hash of your IP address and device ID for abuse prevention and frequency limiting. These prompts undergo AI content moderation through OpenRouter before being published.

BYOK (Bring Your Own Key) Mode: PromHub operates in "Bring Your Own Key" mode, which means you provide your own API key from third-party services such as OpenRouter. This is an industry-standard security architecture that ensures you maintain complete control over your API credentials.

Prompt Processing Data: All prompts you optimize through PromHub's tool are sent directly from your browser to OpenRouter (or your provided API key service) for optimization. Your prompts and API key are never sent to or stored on our servers. All communication occurs directly between your browser and the third-party API service provider (such as OpenRouter). We do not intercept, view, or store any of this information during this process.

API Key Handling: Your API keys are stored locally in your browser's localStorage only. They are never transmitted to our servers. When you use PromHub, your API key and prompts are sent directly from your browser to the third-party service provider, ensuring absolute security and privacy of your credentials.

Frequency Limiting: To prevent abuse, we implement rate limits of 5 prompt submissions per hour and 50 votes per hour. These restrictions are enforced through IP hashing and device ID verification.

Cookie Usage

We use cookies to improve your browsing experience and analyze website traffic. Cookies are small text files stored on your device. When you first visit our website, you will be asked to consent to the use of non-essential cookies (such as those used for analytics). You can accept all cookies or reject non-essential ones. You can also manage your cookie preferences through your browser settings at any time. Disabling cookies may cause some features of the website to not function properly.

Third-Party Services

We use third-party services to operate and improve our site. These services are essential for our platform's functionality.

Supabase: We use Supabase (PostgreSQL database) to store and manage community prompts, votes, and associated metadata. Your prompt submissions and voting data are stored in Supabase for community browsing and discovery.

OpenRouter: We use OpenRouter for AI-powered content moderation of user-submitted prompts before they are published to the Prompt Database. This ensures community safety and compliance with our content guidelines.

Google Analytics: We use Google Analytics to analyze user traffic and improve our service. This service collects data about your device and browsing behavior but does not identify you personally.

Data Sharing

We do not sell your personal information. We share data only with trusted service providers necessary for operating our platform.

With Supabase: We share prompt submissions, votes, and metadata with Supabase for database storage and retrieval. This data is used to power our community Prompt Database feature.

With OpenRouter: We share submitted prompts with OpenRouter for AI content moderation before publication. This is necessary to maintain community safety.

With Google Analytics: We share non-personally-identifying website usage data for traffic analysis and service improvement.

Your Rights

Depending on your location, you may have rights regarding your personal information, including the right to access or delete your data. To exercise these rights, please contact us.

Children's Privacy

Our website is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If you believe we have collected information from a child without consent, please contact us immediately.

International Users

Our website's servers may be located in different countries. By using our website, you consent to your information being transferred to and stored in these regions.

GDPR Compliance: If you are located in the European Economic Area (EEA), please note the following regarding data controller roles: (1) For non-personally-identifying information collected through services like Google Analytics (such as browser type, language preference, referring site, and visit date/time), we act as a data controller and implement appropriate technical and organizational measures to protect such data. (2) For prompts and API keys you input into PromHub, we do not process, store, or have access to this data, as it flows directly from your browser to third-party services (such as OpenRouter) without passing through our servers. Therefore, we are not a data controller for this data. We recommend that EEA users review OpenRouter's privacy policy and terms of service, since your prompts and API keys are sent directly to their services. If you have concerns about data transfers or wish to exercise your rights under GDPR, please contact us through our Contact page.

Data Retention

We retain different types of data for different periods depending on their purpose and necessity for our service.

Prompt Database Content: Prompts and voting data submitted to our community database are retained until: (1) You request deletion through our Contact page, (2) The content violates our community guidelines and is removed, or (3) The service is discontinued. Submissions that pass AI moderation remain publicly accessible in the database.

Automatically Collected Data: We retain automatically collected data (browser type, language preference, referring site, visit date/time) for as long as necessary for analytics and service improvement, typically up to 26 months.

Contact Information: Information you provide via the contact form or email is retained only as long as needed to respond to your inquiry and resolve any related issues.

Data Controller

As a project operated by an independent developer, we assume data controller responsibility for non-personally-identifying information collected through Google Analytics. For prompts and API keys you input into PromHub, we do not process, store, or access such data, and therefore do not assume data controller responsibility for this information.

Contact Us

If you have any questions about this Privacy Policy, please contact us through our Contact page.

Privacy Policy