Privacy Policy

Effective date: July 20, 2026

1. Introduction

PromptForge ("we," "us," or "our") is a client-side AI prompt crafting tool that runs entirely in your web browser. This Privacy Policy explains what data is involved when you use the Service and how it is handled.

We are committed to protecting your privacy. Because PromptForge is a client-side application, your personal data exposure is minimal by design.

2. Data We Do Not Collect

PromptForge does not collect, transmit, or store the following on any server we control:

Personal identifying information (name, email, address, phone number)
Account credentials (there are no user accounts)
Payment card details (processed entirely by Paddle)
Usage analytics, telemetry, or tracking data
Content you generate or prompts you craft
Browser fingerprinting or device identifiers

3. Data Stored in Your Browser

PromptForge uses browser localStorage to persist your data locally on your device. This data never leaves your browser unless you explicitly send it to an AI provider or export it yourself.

localStorage stores:

API keys — your personal keys for Gemini, Anthropic Claude, OpenAI GPT, and OpenCode. These are encrypted with AES-256-GCM using a key derived from your browser. They are sent directly to the respective AI provider and are never transmitted to any PromptForge server.
Prompts and history — generated prompts, versions, saved templates, categories, and evaluation results.
Preferences — selected models, UI settings, and category configurations.

You can delete all PromptForge data at any time by clearing your browser's localStorage for this site or by using the application's data management features.

4. AI Provider Data Flow

When you generate, refine, or evaluate a prompt, your input is sent directly from your browser to the AI provider you selected. This communication is governed by each provider's own privacy policy:

PromptForge does not intercept, log, store, or have access to these requests or responses.

5. Payment Processing

Payments are processed by Paddle, our authorized payment reseller. Paddle collects and processes payment information in accordance with their Privacy Policy. We receive a transaction confirmation (including your email for receipt delivery) but do not receive or store your credit card details, bank account information, or other payment credentials.

6. Cookies

PromptForge uses a single session cookie (pf_session) to maintain your purchase access status. This cookie contains only a session identifier and is not used for tracking or analytics. It is essential for the Service to function and is not used by any third party.

We do not use advertising cookies, analytics cookies, or any tracking cookies.

7. Data Security

We implement industry-standard security measures to protect the limited data we handle:

API keys are encrypted at rest in your browser using AES-256-GCM
All communication with AI providers occurs over TLS/HTTPS
Payment data is handled exclusively by PCI-compliant payment processors
We do not maintain servers that store personal data

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your browser data.

8. Data Retention

PromptForge retains no data on servers. All data is stored in your browser and persists until you delete it. You have full control over your data at all times.

Paddle retains transaction records as required by law. This data is governed by Paddle's privacy policy, not ours.

9. International Data Transfers

When you use an AI provider, your data may be transferred to and processed in countries other than your own. These transfers are governed by the respective AI provider's terms and privacy policies. PromptForge does not facilitate or control these transfers.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

European Economic Area (GDPR): Right to access, rectify, erase, restrict processing, and port your data. Right to object to processing and withdraw consent at any time.
California (CCPA/CPRA): Right to know what personal information is collected, right to delete, right to opt out of sale, and right to non-discrimination.
Other jurisdictions: You may have similar rights under local data protection laws.

Because PromptForge does not collect or store personal data on servers, most data rights are exercised directly by you through your browser (e.g., clearing localStorage). For payment-related data requests, contact Paddle directly.

11. Children's Privacy

The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

12. Third-Party Links

The Service may contain links to third-party AI providers. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party service you interact with.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected on this page with an updated effective date. We encourage you to review this policy periodically.

14. Open Source

PromptForge is open source. You can audit the code to verify these privacy claims. The source code is available on GitHub.

15. Contact

Questions about this Privacy Policy? Open an issue on GitHub.