Privacy Policy

Last updated: March 2026

Introduction

This Privacy Policy describes in detail how thepromptyard.com ("we," "us," or "our") collects, uses, processes, stores, and discloses information obtained from users ("you" or "your") in connection with your access to and use of the platform.

By accessing or using the platform, you acknowledge that you have read and understood this Privacy Policy.


Categories of Information Collected

Account Information

When you register for or access an account, we may collect and store the following information provided via third-party authentication services:

  • Username
  • Display name
  • Email address
  • Profile image

This information is used for identification, authentication, and account management purposes.

User-Generated Content

We collect and store content that you create, upload, or otherwise make available on the platform, including but not limited to:

  • Artifacts (including prompts, personas, workflows, and evaluation sets)
  • Comments
  • Collections
  • Social interactions (such as stars and follows)

Content designated as "public" or "unlisted" may be accessible to other users and may be viewed, copied, forked, remixed, or otherwise interacted with within the platform.

API Keys

If you elect to provide API keys for third-party AI providers, such keys are encrypted at rest using industry-standard encryption (AES-256) and are only decrypted at the time of request execution.

Notwithstanding the foregoing, you acknowledge and agree that the use of API keys is undertaken at your own risk, and we do not guarantee absolute security.

Usage and Technical Information

We may collect technical and usage-related information, including but not limited to:

  • IP address
  • Browser type and version
  • Device information
  • Timestamps of access and requests
  • Aggregate usage metrics

Such information is used for system administration, security monitoring, and service improvement.


Purposes of Processing

We process personal information for the following purposes:

  • To provide, operate, and maintain the platform
  • To authenticate users and manage accounts
  • To display user-generated content in accordance with user-defined visibility settings
  • To monitor, detect, and prevent fraud, abuse, or unauthorized activity
  • To improve, analyze, and optimize platform functionality

We do not sell, rent, or otherwise disclose personal information to third parties for advertising or marketing purposes.


Cookies and Similar Technologies

We utilize cookies and similar technologies, including local storage mechanisms, for purposes including authentication, session management, and user preference retention.

We do not use cookies for behavioral advertising or cross-site tracking.


Third-Party Services

We engage third-party service providers to perform functions necessary for the operation of the platform, including but not limited to authentication, hosting, infrastructure, and AI inference services.

When you initiate a request using an external AI provider, certain data, including prompt content and associated parameters, may be transmitted to such providers.

You are solely responsible for ensuring compliance with the applicable terms and policies of such third-party providers.


Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information, including:

  • Encryption in transit via TLS/HTTPS
  • Encryption of sensitive data at rest
  • Access controls limiting system access to authorized personnel

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.


Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including:

  • Account data retained while the account remains active
  • Deleted content retained for up to 30 days prior to permanent deletion
  • Technical logs retained as necessary for security and operational purposes

User Rights

Subject to applicable law, including the GDPR and CCPA/CPRA, you may have rights to access, correct, delete, or obtain a copy of your personal data.

Requests may be submitted via the Contact Us form.


International Data Transfers

Personal information may be transferred to and processed in jurisdictions outside of your country of residence, including jurisdictions with different data protection standards.


Children

The platform is not intended for use by individuals under the age of 13.


Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. Continued use of the platform constitutes acceptance of any such changes.


Contact

All inquiries should be submitted via the Contact Us form on the platform.