Privacy Policy

Information We Process

Writing Prompt Generator is operated by Li Jing (李靖), an individual based in China and the controller of service data. Contact: support@writingpromptgenerator.net. We process your verified Google subject identifier and email, account reference and credit balance, writing briefs and generated results, saved projects and outline versions, request and moderation records, payment amounts, statuses and order references, and messages you send to support. Cloudflare processes network and request metadata, including IP addresses, request times and errors; our session rate limits use a salted IP hash. We do not collect your Google password or full card details. We do not sell personal information.

Where applicable data protection law requires a legal basis, account access, requested AI generation, project storage, purchases and related support rely on performance of our contract with you. Fraud prevention, duplicate-claim controls and service security rely on our legitimate interest in operating a safe service. Records required by law rely on legal obligations. Any processing based on consent can be withdrawn by contacting support, without affecting processing already lawfully completed.

Browser Storage

Prompt cards saved in your browser use localStorage. An HTTP-only session cookie maintains account access for up to 30 days; an OAuth state cookie lasts 10 minutes. Sign out to remove this browser’s session. Clearing browser storage removes local saved cards but does not delete your signed-in projects. Google Analytics 4 measures visits and page views on the production website, including signed-in screens. It loads without a consent banner. Analytics cookies normally expire after up to two years from the last update; browser settings or blockers can prevent collection. No advertising or marketing pixels are enabled.

AI Services

Providers: Google supplies your verified account ID and email for sign-in. Separately, Google Analytics 4 processes usage events, sanitized page addresses, page titles, referrer domains, browser/device information and analytics cookie identifiers. It uses network information to estimate location; this analytics data is not part of your Google sign-in profile. We do not deliberately send your account email, Google identifier, writing briefs, project text, order references or private project IDs to Analytics. Google signals and ad-personalization signals are disabled in our tag configuration. Cloudflare hosts the service, durable account/project database and operational logs. API Mart receives your brief, revision instructions and relevant selected project context for text generation and safety checks using GPT or Claude models. We do not send your Google identifier, account email or payment information in AI requests. We do not use your writing to train a model ourselves; API Mart and its upstream services have their own data practices. Waffo Pancake receives your account reference, email, selected product and amount to process purchases as Merchant of Record. Full card data is entered on Waffo’s checkout and is never stored on our server.

Support messages sent to our domain email address are forwarded by Cloudflare Email Routing to a Google Gmail inbox, where the operator handles and stores correspondence. Email includes your sender address, message content and any attachments you choose to send. This support inbox is separate from the writing-project database and follows the email providers' data practices.

The operator is based in China, and our providers may process information in other countries. Provider safeguards and retention depend on their terms and the applicable service configuration; we do not promise zero retention or that a particular transfer agreement covers every AI route. Contact support for information about a specific transfer. Do not submit secrets or sensitive personal data in writing briefs.

Provider privacy policies: Google · Cloudflare · API Mart · Waffo Pancake.

Analytics and Cookies

We use Google Analytics 4 for audience and product-usage measurement, relying on legitimate interest where permitted by applicable law. Page views are collected on all production pages without an in-app opt-in prompt. Page query strings and fragments are omitted, private project addresses are grouped, and we do not send user IDs or writing content. You can limit analytics using browser controls, blockers or Google’s Analytics opt-out browser add-on. Analytics retention is controlled by the Analytics property settings and Google’s service practices; deleting an application project does not automatically delete provider-held analytics records. Cloudflare operational logging separately helps diagnose failures and abuse. We have no application email sender or marketing mailing list enabled. Purchase receipts and payment notices are handled by Waffo. Blocking necessary cookies prevents sign-in; local saved cards can be removed through the library or browser storage controls.

Retention and Contact

Projects and account data remain until you delete a project or request account deletion; there is no automatic inactive-account purge. Deleting a project removes its current data and outline versions. Completed AI request responses and moderation decision records become eligible for deletion after 30 days and are pruned daily, so they can remain for up to 31 days. Session rate-limit hashes are cleared daily. Payment records become eligible for deletion 7 years after purchase and are pruned daily. Cloudflare operational logs are retained for up to 7 days; its database recovery system can retain previous state for up to 30 days after deletion. The application does not automatically purge the support mailbox. Ask support to remove correspondence, subject to open disputes or legal obligations. Provider-held records follow each provider’s policy. Local saved cards are removed separately in your library.

You may request access, correction, a portable copy, deletion, restriction, objection or withdrawal of consent by contacting support. We aim to respond within 30 calendar days and explain any required retention. You may complain to your local data protection authority. HTTPS, signed HTTP-only sessions, verified Google identities, owner-scoped project queries and signature-verified payment callbacks protect access; no system is risk-free. If a personal data breach requires notification, we notify affected people and regulators without undue delay within the applicable legal time limits. This service is intended for adults 18 and over. Contact us if a child has provided personal data so we can investigate and delete it. Material policy changes will be announced on this site at least 14 days before taking effect, unless an urgent legal or security change requires an earlier update. We publish the effective date here. Send a message to support@writingpromptgenerator.net. Please do not include API credentials or sensitive personal information.