Last updated October 13, 2026
Privacy Policy
This explains what Promptkura collects when you use Promptkura, why, who processes it, and what you can do about it. We collect as little as we can.
What we collect
- Account: your email, name, and a securely hashed password (or your GitHub/Google account id if you sign in with them).
- Sessions and devices: a sign-in cookie for the website, and an API key for each terminal you connect with
npx promptkura login. You can see and revoke keys in Settings. - Your workspace: favorites, folders, saved searches and private items you create.
- Purchase status: whether your account has lifetime access and an order reference. Card details go to Polar, never to us.
- Usage: daily counters that enforce fair-use limits, and product analytics events (for example "item copied" or "search performed", including search terms). Analytics are tied to your account id; we don't send your email or IP address to our analytics provider.
- Takedown requests: the name, email and details you send through the takedown form.
Why we use it
To run your account and the Service, enforce limits and prevent abuse, keep the library useful (for example, spotting searches with no results), handle payments and support, and respond to takedown requests. We don't sell your data or use it for advertising.
Who processes it
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Hosting the website and API | United States |
| Turso | Database | United States |
| Polar | Payments (merchant of record) | See Polar's policy |
| PostHog | Product analytics | United States |
| GitHub | Optional sign-in; author avatars and source content are loaded from GitHub | United States |
Cookies and local storage
We use a first-party cookie to keep you signed in, and your browser's local storage to remember your light/dark theme. We don't use advertising cookies.
How long we keep it
Account and workspace data are kept while your account exists. Encrypted backups are kept for up to 14 days. Takedown requests are kept as long as needed to handle them and keep a record.
Your choices and rights
- Export: download your favorites and private items from Workspace → Export at any time.
- Access, correction, deletion: email hello@promptkura.me and we'll respond within 30 days. Deleting your account removes your data from the live database; backups expire within 14 days.
- Depending on where you live (for example the EU, UK or California), you may have further rights, including to object or to complain to a data protection authority.
Children
Promptkura is not intended for children under 16 and we don't knowingly collect their data.
Changes
If we change this policy in a meaningful way, we'll update the date above and tell you on the site or by email.
Contact
Privacy questions or requests: hello@promptkura.me.