Privacy Policy
Last updated: March 2026
Introduction
This Privacy Policy describes in detail how thepromptyard.com ("we," "us," or "our") collects, uses, processes, stores, and discloses information obtained from users ("you" or "your") in connection with your access to and use of the platform.
By accessing or using the platform, you acknowledge that you have read and understood this Privacy Policy.
Categories of Information Collected
Account Information
When you register for or access an account, we may collect and store the following information provided via third-party authentication services:
- Username
- Display name
- Email address
- Profile image
This information is used for identification, authentication, and account management purposes.
User-Generated Content
We collect and store content that you create, upload, or otherwise make available on the platform, including but not limited to:
- Artifacts (including prompts, personas, workflows, and evaluation sets)
- Comments
- Collections
- Social interactions (such as stars and follows)
Content designated as "public" or "unlisted" may be accessible to other users and may be viewed, copied, forked, remixed, or otherwise interacted with within the platform.
API Keys
If you elect to provide API keys for third-party AI providers, such keys are encrypted at rest using industry-standard encryption (AES-256) and are only decrypted at the time of request execution.
Notwithstanding the foregoing, you acknowledge and agree that the use of API keys is undertaken at your own risk, and we do not guarantee absolute security.
Usage and Technical Information
We may collect technical and usage-related information, including but not limited to:
- IP address
- Browser type and version
- Device information
- Timestamps of access and requests
- Aggregate usage metrics
Such information is used for system administration, security monitoring, and service improvement.
Purposes of Processing
We process personal information for the following purposes:
- To provide, operate, and maintain the platform
- To authenticate users and manage accounts
- To display user-generated content in accordance with user-defined visibility settings
- To monitor, detect, and prevent fraud, abuse, or unauthorized activity
- To improve, analyze, and optimize platform functionality
We do not sell, rent, or otherwise disclose personal information to third parties for advertising or marketing purposes.
Cookies and Similar Technologies
We utilize cookies and similar technologies, including local storage mechanisms, for purposes including authentication, session management, and user preference retention.
We do not use cookies for behavioral advertising or cross-site tracking.
Third-Party Services
We engage third-party service providers to perform functions necessary for the operation of the platform, including but not limited to authentication, hosting, infrastructure, and AI inference services.
When you initiate a request using an external AI provider, certain data, including prompt content and associated parameters, may be transmitted to such providers.
You are solely responsible for ensuring compliance with the applicable terms and policies of such third-party providers.
Data Security
We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information, including:
- Encryption in transit via TLS/HTTPS
- Encryption of sensitive data at rest
- Access controls limiting system access to authorized personnel
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Data Retention
We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including:
- Account data retained while the account remains active
- Deleted content retained for up to 30 days prior to permanent deletion
- Technical logs retained as necessary for security and operational purposes
User Rights
Subject to applicable law, including the GDPR and CCPA/CPRA, you may have rights to access, correct, delete, or obtain a copy of your personal data.
Requests may be submitted via the Contact Us form.
International Data Transfers
Personal information may be transferred to and processed in jurisdictions outside of your country of residence, including jurisdictions with different data protection standards.
Children
The platform is not intended for use by individuals under the age of 13.
Changes to This Policy
We reserve the right to modify this Privacy Policy at any time. Continued use of the platform constitutes acceptance of any such changes.
Contact
All inquiries should be submitted via the Contact Us form on the platform.