Privacy Policy

1. Overview

We respect your personal privacy and are committed to maintaining data transparency. Unlike platforms that trade in user telemetry or third-party behavioral profiling, we only collect information necessary to authenticate users, facilitate prompt sharing, safeguard platform integrity, and deliver our core discovery service.

2. Information We Collect

Depending on how you interact with our website, we collect and store the following categories of data:

• Account & Profile Information: When you register an account, we collect your chosen username, email address, and an encrypted password hash. You may optionally supply a full name, biography, or avatar image URL. Passwords are never stored in plaintext; they are securely hashed using industry-standard one-way cryptographic algorithms.
• Prompt Submissions & Creator Content: When you submit an AI prompt, we store the prompt title, formula text, description, instructions, associated AI model, category selection, tags, and any uploaded or linked preview images.
• Usage Analytics & Anti-Abuse Metrics: When you view or copy prompts, our system records the prompt ID, timestamp, and client IP address in transient log tables (`prompt_views` and `prompt_copies`). This data is collected solely to maintain trending algorithms, prevent automated artificial copy inflation, and identify spam or denial-of-service abuse.
• Contact Inquiries: When you submit a message through our Contact Us page, we collect your name, email address, subject line, message text, and submission timestamp in our support database for administrative review.
• Administrative Activity Logs: Significant administrative actions (such as publishing, updating, or deleting prompts and categories) record the administrative user ID, action type, description, and IP address for internal auditability.

3. Cookies & Browser Storage

We use minimal, functional cookies and browser storage strictly required for platform operation:

• PHPSESSID: A secure, HttpOnly session cookie used to keep registered members logged in and track session state.
• CSRF Token: A cryptographic session value used to protect form submissions from Cross-Site Request Forgery attacks.
• pine_theme (localStorage): Stores your visual theme preference (Dark Mode or Light Mode) directly in your browser.

We do not deploy third-party advertising tracking cookies or invasive cross-site behavioral tracking scripts.

4. Purpose & Use of Data

We use collected information exclusively to:

• Authenticate your account and enable personalized prompt bookmarking.
• Display user-submitted prompts publicly with attributed author usernames.
• Calculate real-time leaderboard statistics, copy counts, and trending prompts.
• Respond to feedback and support messages submitted through the contact form.
• Defend against malicious scraping, automated spam bots, and security vulnerabilities.

5. Security Safeguards

We enforce multi-layered engineering practices to protect your data. All database interactions utilize parameterized PDO prepared statements to eliminate SQL injection vulnerabilities. All dynamic web outputs are sanitized against Cross-Site Scripting (XSS). Authentication cookies use `HttpOnly` and `SameSite=Lax` policies, and user passwords are irreversibly salted and hashed.

6. Third-Party Services & External Links

Our site incorporates fonts from Google Fonts and may link to external generative AI tools (such as OpenAI, Anthropic, Google, and Midjourney) or sample imagery hosted via Unsplash. Visiting external links or using third-party services is subject to the respective privacy policies and terms of those external providers.

7. Your Rights & Choices

You retain control over your information. Registered creators can review and edit their submitted prompts and update their profile details at any time from the account dashboard. If you wish to delete your account, remove submitted prompts, or inquire about data stored in connection with your email, please reach out to us through our Contact Us page.