Last updated: June 27, 2026

1. Introduction

Welcome to PromptCraft. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and use our Chrome extension, and tell you about your privacy rights and how the law protects you.

2. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

Contact Data: includes your email address, provided when you sign in
Technical Data: includes internet protocol (IP) address, browser type and version, time zone setting and location, operating system and platform
Usage Data: includes information about how you use our website and services
Local Storage Data: a session identifier is stored in your browser to maintain your chat history across page loads. This data is never used for tracking across other sites and can be cleared at any time using the Clear button in the chat interface
Account Data: when you sign in, your email address is stored securely to authenticate your identity and maintain your session. Your account data is retained for as long as your account exists. To request deletion, contact us at support@promptcraft.net

2.1 Chrome Extension Data

The PromptCraft Chrome extension collects and stores the following data:

Authentication tokens — when you sign in through the extension, OAuth tokens are stored locally in the extension's storage to maintain your authenticated session
User preferences and prompt history — stored locally in Chrome's extension storage on your device. This data never leaves your browser unless you explicitly send it through the extension's features
Email address — retrieved from your authenticated account to associate your extension activity with your PromptCraft account

The extension communicates only with the following domains:

promptcraft.net — the PromptCraft web application and API
auth.marseil.dev — our authentication server used for sign-in and token management

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

To provide and improve our services
To respond to your inquiries
To monitor the usage of our service
To detect, prevent and address technical issues
To authenticate your identity in the Chrome extension and maintain your session

4. Chrome Extension Permissions

The PromptCraft Chrome extension requests the following browser permissions:

sidePanel — displays the extension interface in the browser's side panel for convenient access while browsing
identity — enables the OAuth sign-in flow through Chrome's identity API so you can authenticate with your PromptCraft account
storage — stores your preferences, prompt history, and authentication tokens locally on your device

5. Third-Party Services

When you use PromptCraft, your data is shared with the following services that operate the features we rely on:

Logto (auth.marseil.dev) — handles authentication and issues OAuth tokens for both the website and the Chrome extension

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

7. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

Request access to your personal data
Request correction of your personal data
Request erasure of your personal data
Object to processing of your personal data
Request restriction of processing your personal data
Request transfer of your personal data
Right to withdraw consent

8. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at:
Email: support@promptcraft.net

Privacy Policy