Privacy Policy
Version 2026-09-08
This policy covers the PromptPotter website (promptpotter.com)
and the hosted instance at app.promptpotter.com. The
controller is David Streuli, Switzerland,
reachable at
privacy@promptpotter.com.
What the hosted instance collects
- Your account email, supplied by Google when you sign in with OIDC. We do not receive or store a password.
- What you submit — the prompts you optimize, the examples you score them against, and the campaign configuration around them.
- Campaign results — dataset name, every prompt revision the optimizer writes, and the scores it measures.
- Spend telemetry — tokens, model, and request count, so a free account can be held to its ceiling.
- Your consent record — which version of the Terms you accepted and when, stamped by the server.
What we do with what you submit
We keep it, and we read it to improve PromptPotter — to find where the optimizer fails, which prompts defeat it, and what to fix next. That is the trade for the free tier, and it is the consent you tick when you first sign in.
We do not train models on it. Your submissions are not fed into model training, not sold, not shared with anyone outside the processors listed below, and never used for advertising.
Because a human may read it, the hosted instance is only for non-sensitive material. Do not paste passwords, personal data about other people, or anything confidential or owned by someone else. If you need to run PromptPotter on material like that, run it yourself — the optimizer is open source and installs on your own machine, where none of this applies.
Where your prompts go
Optimizing a prompt means sending it to a language model. Depending on the model a campaign is configured to use, your prompts and examples are transmitted to OpenAI, Anthropic, Groq or OpenRouter, who process them under their own terms. We cannot narrow what a provider does with a request we send it.
Accounts are isolated from each other
Each account owns its own tenant, and the isolation is structural rather than a permission check: one account’s campaigns, datasets and results are not reachable from another’s, and a request for someone else’s data is answered as if it did not exist.
This website’s visit log
The site keeps a separate, first-party visit log — the pages you open and the links you click, recorded with your IP address, the approximate country and city it resolves to, and your browser’s user-agent string. It tells us who is finding the project.
It is deliberately small: no third-party analytics, no cookies, nothing written to your device, and no tracking across other sites. Entries are deleted automatically after 90 days. Browsers sending a Do Not Track signal are not recorded at all.
Legal bases
- Your account and the service itself — performance of a contract, GDPR Art. 6(1)(b).
- Reading your submissions to improve the tool — your consent, GDPR Art. 6(1)(a), given at the consent gate and withdrawable at any time by writing to us.
- The website visit log and spend telemetry — legitimate interest, GDPR Art. 6(1)(f), in understanding how people find the project and in keeping a free tier from being drained.
Processors
The data above is processed on our behalf by Vercel (this website), Railway (the hosted instance and its automation), and Google (sign-in, and the spreadsheets the visit log and signup records are written to). This places data on servers outside Switzerland and the EU. The model providers named above receive prompt content as described there.
How long it is kept
The website visit log is deleted after 90 days, automatically.
Everything tied to an account is currently kept indefinitely. There is no automatic deletion routine and no self-service delete button yet. We would rather say that than imply a schedule we do not run. Deletion happens when you ask for it: write to privacy@promptpotter.com and it is done by hand.
Your rights
You can ask what we hold about you, have it corrected, have it deleted, object to the visit log, withdraw the consent you gave for improvement use, or ask for a copy of your data. Write to privacy@promptpotter.com. For a visit-log request, tell us the IP address and rough time, since that is the only thing such an entry is tied to — or simply send a Do Not Track signal, which stops the collection with no request needed.
If you think we have handled your data wrongly, you can complain to a supervisory authority: in Switzerland the FDPIC, or in the EU the authority for your country of residence.
Changes
This policy carries a version. When it changes materially, the version moves and the app asks you to accept the new one before you continue. The version you accepted, and when, is recorded on your account.