Privacy policy

Data controller

The data controller is lacause (see the legal notice). For any request: lacause.ai@gmail.com.

Data we collect

• Account: your email address (private, never shown publicly), your username (public), and, if you choose a password, its hashed form (never the plaintext password).
• Sign-in via GitHub or Google (optional): the account identifier and verified email provided by the provider.
• Your content: prompts, reviews, votes, bookmarks, reports, and an optional bio.
• Technical data: IP address (used temporarily to limit abuse and spam) and server logs.
• Anonymous analytics (PostHog), on by default and with no personal data: pseudonymized identifiers (irreversible hash), IP not retained, search terms never sent. You can object at any time — see “Cookies & analytics”.

Purposes & legal bases

• Provide the service (account, publishing, moderation) — performance of the contract and legitimate interest.
• Security and abuse prevention (rate limiting, moderation) — legitimate interest.
• Sending sign-in emails (magic links) — performance of the contract.
• Anonymous analytics to improve the site — legitimate interest, with a right to object (opt out) at any time.

“Improve / Evaluate this prompt” AI assistant

If you use these optional features, the prompt text you submit is sent to Mistral AI's API to be rewritten or evaluated, then the result is returned. Do not include any personal or confidential data.

Processors & hosting

• Vercel — application hosting and web analytics (Web Analytics, cookieless and anonymous) (USA; transfer covered by appropriate safeguards).
• Neon — database, hosted in the European Union.
• Resend — sending transactional emails (sign-in links).
• Upstash — anti-abuse rate limiting.
• Mistral AI — only if you use the AI assistant (improve / evaluate; see above).
• PostHog — anonymous analytics, hosted in the EU, can be turned off at any time.

Retention

Your account data is kept as long as your account exists. On deletion, your contributions are anonymized (decoupled from your identity) and your personal data deleted. Technical logs are kept only for a limited time.

Your rights (GDPR)

• Access & portability: export all your data from “My account”.
• Rectification: edit your profile and content at any time.
• Erasure: delete your account from “My account” (your contributions are then anonymized).
• Objection: turn off analytics at any time, via the banner or the “Usage analytics” setting in “My account”.
• Complaint: you may lodge a complaint with the competent supervisory authority (in France, the CNIL).

Cookies & analytics

Promptypedia uses a session cookie (essential for sign-in), a cookie remembering your language, and a cookie storing your analytics choice. This analytics (PostHog) is anonymous and on by default, solely to improve the site: a non-blocking banner lets you decline, and you can re-enable or disable it at any time from the “Usage analytics” setting in “My account”. No advertising, no third-party marketing trackers, no data resale.

Contact

To exercise your rights or for any question about this policy: lacause.ai@gmail.com.