Privacy

Privacy Policy

This policy explains what personal data ShipThePrompt handles, why we use it, who receives it, and the controls available to you.

Effective and last updated: August 31, 2026

Public means public

Vibes, profiles, prompts, and community activity may be visible to anyone.

No sale of personal data

We use service providers to run the product; we do not sell your personal data.

Analytics is optional

Google Analytics remains off unless you choose to allow it.

1. Scope and who is responsible

ShipThePrompt (“we,” “us,” or “our”) is a community platform for discovering and sharing software built with AI prompts. ShipThePrompt is responsible for the personal data described in this policy when you use the website, create an account, publish content, or contact us.

This policy should be read together with our Terms of Use and Cookie Policy. It is intended to explain our practices under applicable privacy laws, including the EU General Data Protection Regulation and UK GDPR where they apply.

2. Personal data we collect

We collect data directly from you, automatically from your device, and from an authentication provider when you choose to use one:

  • Account and profile data: email address, display name, username, profile image, account identifier, authentication status, biography, social links, preferences, and information received from Google when you use Google sign-in.
  • Community and submission data: vibes, project links, descriptions, images, tools, models, prompts, comments, votes, follows, reports, claims, battle participation, and other content or interactions you submit.
  • Communications: support requests, feedback, reports, and email delivery or subscription preferences.
  • Technical and security data: IP address, request and security logs, browser and device details, timestamps, authentication events, and information used to prevent abuse and keep the service reliable.
  • Usage data: page views and interactions, session identifiers, referral data, approximate location, and device or browser information. Google Analytics receives this data only when you consent. We also record limited first-party product interactions, such as demo views or prompt copies, to operate creator analytics and prevent duplicate counts.
  • AI feature data: prompts, descriptions, URLs, and other inputs submitted to an AI-powered feature, together with the generated output and operational metadata needed to provide and safeguard that feature.

3. How and why we use personal data

Purpose

GDPR legal basis

Create accounts; authenticate users; publish profiles and submissions; provide comments, votes, follows, battles, claims, notifications, and creator analytics.

Performance of our agreement

Secure, troubleshoot, moderate, measure, and improve the service; prevent fraud and abuse; understand feature performance.

Legitimate interests

Send verification, password reset, account, activity, and service messages.

Agreement and legitimate interests

Send optional weekly updates and use Google Analytics.

Consent

Respond to rights requests, preserve required records, and comply with lawful requests.

Legal obligation and legitimate interests

Where we rely on legitimate interests, we consider the impact on your rights. Where we rely on consent, you may withdraw it at any time without affecting processing that already occurred.

4. Public content and other users

Your profile, display name, image, public submissions, shared prompts, comments, votes, follows, rankings, awards, and similar community activity may be visible to anyone, including people without an account and search engines. Other users may link to, copy, reshare, or independently retain public material.

Do not submit sensitive personal data or personal data about someone else unless it is necessary, you have permission and a lawful basis, and public disclosure is appropriate. Removing content from ShipThePrompt may not remove copies held by others or cached by search engines.

5. How we share data and international transfers

We do not sell personal data. We disclose it only as described below:

  • Service providers: Firebase and Google Cloud for authentication, databases, storage, and infrastructure; hosting providers; Brevo for transactional and opted-in email; Google Analytics when you consent; and AI model providers when an AI feature requires them.
  • The public and other users: when you publish content or take part in public community features.
  • Legal and safety recipients: when reasonably necessary to comply with law, respond to valid legal process, enforce our terms, investigate abuse, or protect people, rights, and the service.
  • Business transfers: in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and legal safeguards.

Providers may process data outside your country, including outside the European Economic Area or United Kingdom. Where required, we rely on an adequacy decision, approved contractual protections such as standard contractual clauses, or another lawful transfer mechanism.

6. How long we keep data

We keep account and profile data while your account is active and community content while it remains published or needed to provide the service. Retention periods depend on the type of data, why it was collected, the sensitivity and risk involved, and legal, security, fraud-prevention, backup, and dispute-resolution requirements.

After an account or content is deleted, limited copies may remain temporarily in backups or logs. We may retain or anonymize records needed to protect the integrity of public discussions, document moderation decisions, resolve disputes, enforce agreements, or comply with law. Cookie-specific periods are listed in our Cookie Policy.

7. Your choices and privacy rights

You can update profile and email preferences through your dashboard. You can also request account deletion there; deletion requires a short-lived confirmation link sent to your verified email. Optional weekly updates can be left unchecked at sign-up or disabled later. Analytics consent can be accepted, rejected, or withdrawn through cookie settings.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data; restrict or object to processing; withdraw consent; or appeal a decision. You may also complain to your local data protection authority. These rights can be limited by law, including where data is needed to protect others or comply with a legal obligation.

To make a request, email [email protected]. Describe your request and the account involved. We may verify your identity before acting and will respond within the period required by applicable law.

8. Security and children

We use reasonable technical and organizational measures designed to protect personal data, including managed authentication, access controls, and security monitoring. No online system is completely secure, so we cannot guarantee absolute security. Protect your credentials and contact us if you believe your account has been compromised.

ShipThePrompt is not intended for children under 13 or under a higher minimum age where local law requires it. We do not knowingly collect personal data from a child who cannot lawfully use the service. If you believe a child has provided data improperly, contact us so we can review and delete it where appropriate.

9. Changes and contact

We may update this policy when our service, providers, or legal obligations change. We will publish the revised policy here, update the date above, and give additional notice when required.

For privacy questions or requests, email [email protected]. For general help, visit the Contact page.