Privacy policy

Who is responsible

The controller of personal data processed through this website is the operator of PromptGenia. For any privacy question or request, contact contacto@promptgenia.com or use the contact form.

Tools that run in your browser

The prompt builders, the prompt checker, the token counter, the image-to-text (OCR) tool, the AI text detector and the basic humanizer process your input locally on your device. The text and images you use with them are not sent to or stored on our server. The OCR tool downloads its recognition engine and language data from a public content delivery network (CDN) the first time you use it; as with any download, that CDN receives your IP address and browser information, but not your images.

If you use the voice input button, speech recognition is provided by your browser. Depending on the browser, your audio may be processed by the browser vendor's service under its own privacy policy. We do not receive the audio.

Data we collect

Contact form

When you send a message, we receive your name, email address and message. They are emailed to the site owner and kept in a private log on the server that is not publicly accessible. We use them only to answer you and handle any follow-up.

Optional AI features

Some features, such as Enhance with AI, image-to-prompt, image-to-JSON, two-images-to-prompt, the AI humanizer and the AI product description, can use an external AI provider when AI mode is available on this site. Only when you click one of these AI buttons, the text or images you provided, together with the instructions for the task, are sent through our server to the AI provider configured by the site owner (for example OpenAI, Google, Anthropic or another compatible service). The result is returned to your browser. We do not store your text, images or the AI result. The provider processes the request under its own terms and privacy policy and may retain it for a limited time according to those terms. The site can use several providers in a fixed order (for example Google Gemini, Mistral, Groq, OpenRouter or DeepSeek): if one is unavailable or has reached its limit, the request is sent to the next one. Some providers' free plans allow them to use submitted content to improve their services, so do not enter personal or confidential information in the AI features.

Rate limiting

To prevent abuse of the AI features, the server keeps a short record of how many AI requests come from each visitor. It is linked to a one-way hash of your IP address created with a secret key, not to the IP address itself, and contains only request times. These records are normally deleted after about two hours.

Technical error log

If the AI provider returns an error, the server may log the time, the type of task and the error code so the problem can be fixed. This log does not include your text or images.

Server and hosting logs

Like almost every website, our hosting provider automatically records technical data for each request, such as IP address, date and time, requested page, referring page and browser type. These logs are used for security, troubleshooting and keeping the site running, and are kept for a limited period set by the hosting provider.

Data stored in your browser

The site saves a few items in your browser's local storage: your 20 most recent generated prompts (pg_hist), whether you dismissed the cookie notice (pg_cookie) and whether you dismissed the language suggestion (pg_lang_dismiss). This data stays on your device and is never sent to us. The cookie policy lists these items in detail.

Advertising (Google AdSense)

This site is funded by ads served by Google AdSense. Google, as a third-party vendor, and its partners use cookies and similar technologies to serve ads, limit how often you see them, measure their performance and prevent fraud. Google's use of advertising cookies enables it and its partners to serve ads based on your visits to this and other websites.

Where required by law, including in the European Economic Area, the United Kingdom and Switzerland, personalized ads are shown only if you give consent through the consent message. Without consent, Google may show non-personalized ads, which still use cookies for frequency capping, aggregated reporting and fraud prevention.

You can learn how Google uses data in advertising at policies.google.com/technologies/ads and how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites. You can turn off personalized advertising in Google's ad settings.

Analytics (optional)

The site owner may enable Google Analytics 4 to understand which pages and tools are used. It is configured with Google Consent Mode, with analytics and ad storage set to denied by default. Analytics cookies are only set after you give consent where consent is required; before that, Google receives only limited, cookieless signals. Analytics data is used in aggregate to improve the site, not to identify you.

Legal bases (GDPR and UK GDPR)

• Legitimate interests (Art. 6(1)(f)): answering contact messages, server logs, security, rate limiting and error logging, and running the AI features you request.
• Consent (Art. 6(1)(a)): personalized advertising, analytics cookies and other non-essential cookies where consent is required. You can withdraw consent at any time.
• Legal obligations (Art. 6(1)(c)): where we must keep or disclose data by law.

Your rights

If you are in the EEA, the UK or Switzerland, you have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability and to withdraw consent at any time without affecting earlier processing. You also have the right to complain to your local data protection authority.

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information is collected, to delete it, to correct it and to opt out of its sale or sharing for cross-context behavioral advertising. We do not sell personal information for money. The use of advertising cookies by Google may be considered sharing under California law; you can opt out by declining personalized ads in the consent message where shown, by using Google's ad settings, or by enabling a Global Privacy Control signal in your browser. We will not discriminate against you for exercising these rights.

To exercise any right, write to contacto@promptgenia.com. We may need to ask for information to confirm your request, and we will reply within the time required by law.

International transfers

Our hosting provider, Google and the AI providers may process data in countries outside your own, including the United States. Where the GDPR applies, such transfers rely on safeguards such as adequacy decisions or the European Commission's Standard Contractual Clauses provided by those companies.

How long data is kept

• Contact messages: as long as needed to handle your request and any follow-up, after which they are deleted; you can ask for earlier deletion.
• Rate-limit records: about two hours.
• AI requests: not stored by us.
• Server logs: for the limited period set by the hosting provider.
• Browser storage: until you clear it in your browser.
• Advertising and analytics cookies: according to Google's policies and your consent choices.

Security

The site uses encrypted HTTPS connections, keeps API keys on the server only and stores logs in a folder that cannot be accessed from the web. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data.

Children

The site is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy when the site or the law changes. The date at the bottom of the page shows the latest version. Significant changes will be highlighted on this page.

Contact

For questions about this policy or your data, write to contacto@promptgenia.com.

Updated: 2026-11-04