This Privacy Policy explains how AI Prompts Catalogue (“we”, “us”, “our”) collects, uses and protects personal information when you use aipromptscatalogue.com (the “Site”). It is written to meet South Africa’s Protection of Personal Information Act (POPIA), the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (GDPR).
The short version
- You can browse, search and copy every prompt without an account.
- We only use analytics (Google Analytics) if you allow it in our cookie banner. We never use advertising cookies and we do not sell personal information.
- If you create an account or contact us, we use your details only to run your account, review your submissions and reply to you.
- You can ask for a copy of your information, or for it to be deleted, at any time.
Who is responsible
AI Prompts Catalogue is the responsible party (POPIA) and data controller (UK GDPR and GDPR) for the personal information described here. You can reach us, including our Information Officer, at [email protected] or through our contact form.
Information we collect
When you visit the Site
Our web hosting provider and Cloudflare, which protects and speeds up the Site, process technical information such as your IP address, browser type, the pages you request and the time of each request, so that the Site can be delivered and kept secure. Searches on the browse page run in your browser; we do not store them (but see “If you allow analytics” below). When you copy a prompt we count the copy; to avoid counting the same visitor repeatedly we keep a one-way scrambled (hashed) form of your IP address for up to 30 minutes.
If you allow analytics
If you choose “Allow analytics” in our cookie banner, we use Google Analytics to understand how the Site is used, for example which pages and prompts are popular, so we can improve it. Google Analytics uses cookies with a random identifier and collects information such as the pages you view (including the page address, which can contain what you searched for or filtered on), how you arrived at the Site, your device and browser type, your approximate location (country or city, worked out from your IP address, which Google Analytics does not store) and how you interact with pages, such as scrolling and clicks. We use it only for statistics: advertising features and Google signals are switched off, and we do not combine it with your account. Nothing from Google loads until you allow it, and you can change your choice at any time with the “Cookie settings” link at the bottom of every page.
When you create an account
Your name, email address and password (stored only in a securely hashed form), an automatically created username, the dates you registered, confirmed your email and were approved, your account status, a record that you accepted our Terms and confirmed your age or parental permission, and a hashed form of your IP address at sign-up to help prevent abuse.
When you share a prompt
The prompt and the details you provide, the date you submitted it, and our review decision and any reviewer note. When a prompt is published, the name you chose is shown with it.
When you contact us
Your name, email address, the topic, your message, the page or prompt you refer to, and a hashed form of your IP address for spam protection.
Security records
To stop abuse, we count sign-up, sign-in, contact and similar attempts against a hashed form of the IP address for up to one hour.
How we use your information and our lawful basis
| Purpose | Information | Lawful basis |
|---|---|---|
| Delivering the Site and keeping it secure | Technical information, hashed IP addresses | Our legitimate interest in running a safe, working website |
| Creating and running your account, reviewing and publishing your prompts, and sending you account emails | Account and submission information | Performing our agreement with you (our Terms) |
| Replying to messages and handling reports, privacy and copyright requests | Contact information and messages | Our legitimate interest in responding to you, and complying with legal obligations |
| Preventing spam, fraud and misuse | Hashed IP addresses, account information | Our legitimate interest in protecting the Site and its users |
| Understanding how the Site is used, with Google Analytics | Analytics information and cookies | Your consent, which you can withdraw at any time |
| Accounts for members under 18 | Account information | The consent of a parent or guardian |
| Meeting legal requirements | Any of the above, as needed | Complying with a legal obligation |
We only send emails about your account and your submissions, such as confirming your email address, approval and review results. We do not send newsletters or marketing.
Children
Accounts are available from age 10. Anyone under 18 may only create an account with the permission of a parent or guardian, who consents to the processing described in this policy. If we learn that an account was created without that permission, we will delete it. Parents and guardians can contact us at any time to review or delete their child’s information. We ask children not to include personal information in prompts.
Who we share information with
- Our service providers: our web hosting provider, which stores the Site and its database and sends our emails, and Cloudflare, which delivers and protects the Site. They process information only on our instructions.
- Google, our analytics provider (Google Ireland Limited for visitors in the UK and EEA, and Google LLC), only if you allow analytics.
- When required by law or to protect the rights, safety and security of our users, the public or the Site.
We do not sell or rent personal information. If you use Open in ChatGPT or Open in Claude, your browser sends the prompt text to that service, and its own privacy policy applies. Links to other websites, such as GitHub or X, are covered by those websites’ policies.
International transfers
Our service providers may process information outside South Africa, the United Kingdom or the European Economic Area, for example across Cloudflare’s global network, and Google may process analytics information in the United States. Where this happens we rely on the safeguards required by law, such as the providers’ data protection terms, standard contractual clauses and, for Google, its certification under the EU-US Data Privacy Framework and its UK Extension.
How long we keep information
- Accounts: while your account is open. When you ask us to delete your account we do so within 30 days, except limited records we must keep by law or to resolve disputes.
- Sign-ups that are never confirmed: deleted after 30 days.
- Published prompts: they stay published because they have been shared for everyone to use; if you delete your account we remove your name from them.
- Messages to us: as long as needed to handle your request, and no longer than 24 months.
- Hashed IP counters: between 30 minutes and one hour.
- Analytics information: up to 14 months in Google Analytics, after which it is deleted automatically. Analytics cookies last up to two years in your browser unless you delete them or withdraw consent.
- Technical logs: kept by our providers for short periods under their own policies.
Your rights
Depending on where you live, you have the right to access your personal information, correct it, have it deleted, object to or restrict its use, receive it in a portable format, and withdraw consent at any time. To withdraw consent to analytics, use the “Cookie settings” link at the bottom of any page. For other requests, sign in and use the options on My account, or contact us. We will respond within one month.
If you are unhappy with how we handle your information, please contact us first. You also have the right to complain to a supervisory authority: the Information Regulator in South Africa, the Information Commissioner’s Office in the United Kingdom, or the data protection authority in your EU country.
How we protect information
The Site uses encrypted connections (HTTPS), passwords are stored only in hashed form, dashboard access is limited, and we use rate limits and manual review to prevent abuse. No system is completely secure, so please use a strong, unique password.
Cookies
We use cookies that are needed to keep you signed in and to protect the Site, and analytics cookies only if you allow them. See our Cookie Policy.
Changes to this policy
We will update this page and the date at the top when this policy changes, and let members know by email about significant changes.
Contact
[email protected] or our contact form.