PromptCrush Logo PromptCrush

Privacy Policy

How we collect, use, and protect your data
TL;DR:
We collect minimal data to run the game: your email (if you sign up), prompts you submit, your scores, and basic usage analytics. We don't sell your data or use it for ads. You can delete your account anytime. Anonymous users can play without providing any personal information.

Last Updated: 7/4/2025

1. Information We Collect

1.1 Account Information

  • Email Address: When you create an account using magic link authentication
  • Username: Optional display name for leaderboards
  • Authentication Data: Managed securely by Supabase authentication service

1.2 Game Data

  • Challenge Attempts: Your submitted prompts, completion times, and scores
  • AI-Generated Outputs: Text and images generated from your prompts for evaluation
  • Leaderboard Data: Published scores and anonymized prompt data (when you choose to publish)
  • Challenge Completion Status: Tracking which daily challenges you've completed

1.3 Technical Information

  • Usage Analytics: Page views and user interactions via Vercel Analytics
  • Browser Focus Events: To enforce anti-cheat measures during challenges
  • Session Data: Temporary session identifiers for anonymous users

1.4 Anonymous Users

Guest users can play daily challenges without providing personal information. We create temporary anonymous sessions only when you click "Start Challenge!" to minimize data collection.

2. How We Use Your Information

2.1 Core Game Functionality

  • Providing daily prompt engineering challenges
  • Scoring your attempts using AI evaluation
  • Maintaining leaderboards and past challenge access
  • Preventing cheating through focus detection and time tracking

2.2 Account Management

  • Authentication via magic link emails
  • Converting anonymous sessions to full accounts when you sign up
  • Username management for leaderboard display

2.3 Communication

  • Sending magic link authentication emails
  • Future: Optional daily challenge reminder emails (with opt-out)

3. Data Sharing and Third Parties

3.1 Service Providers

  • Supabase: Database, authentication, and backend services
  • OpenRouter: AI evaluation of prompts (prompts and outputs sent for scoring)
  • Replicate: Image generation for image challenges
  • Vercel: Hosting and analytics

3.2 Public Information

  • Leaderboards: Published scores and usernames are publicly visible
  • Challenge Submissions: Other users who completed the same daily challenge can view your submission details

3.3 No Data Sales

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

4. Data Security

  • All data is encrypted in transit and at rest
  • Authentication handled by Supabase's secure infrastructure
  • Row Level Security (RLS) policies protect your private data
  • Regular security updates and monitoring

5. Your Rights and Choices

5.1 Account Management

  • Access: View your account data and challenge history
  • Update: Change your username and account settings
  • Delete: Permanently delete your account and all associated data

5.2 Leaderboard Control

  • Choose whether to publish scores to public leaderboards
  • Control visibility of your challenge submissions

5.3 Anonymous Play

  • Play daily challenges without creating an account
  • Convert to full account later while preserving your game data

6. Data Retention

  • Account Data: Retained until you delete your account
  • Challenge Data: Daily challenges and user attempts stored indefinitely for game functionality
  • Anonymous Sessions: Automatically cleaned up after extended inactivity
  • Deleted Accounts: All personal data permanently removed within 30 days

7. Cookies and Tracking

  • Essential cookies for authentication and session management
  • Analytics cookies for understanding usage patterns (Vercel Analytics)
  • No advertising or marketing cookies
  • Local storage for game state and preferences

8. Children's Privacy

PromptCrush is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9. International Users

PromptCrush is operated from the United States. If you are accessing the service from outside the US, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Email: privacy@promptcrush.ai
  • Website: promptcrush.ai

12. Legal Basis for Processing (GDPR)

For users in the European Union, our legal basis for processing your personal data includes:

  • Legitimate Interest: Providing game functionality and preventing cheating
  • Consent: Publishing scores to leaderboards and optional communications
  • Contract: Fulfilling our terms of service when you create an account