Privacy Policy

Last updated: August 2026 · The Swiss Data Protection Act (DSG) applies and, where applicable, the European GDPR.

This is a convenience translation. The German version is legally binding.

1. Controller

2. Hosting and server logs

This website is hosted by cyon GmbH (Basel, Switzerland). When pages are accessed, the server processes, as technically required: IP address, date and time, page requested, browser type. These logs serve secure operation and error analysis and are deleted according to the host's usual retention periods.

3. Cookies

PromptHub uses strictly necessary cookies only: a session cookie and a security cookie protecting against forged requests (CSRF). There are no tracking, analytics, or advertising cookies.

4. Account via GitHub sign-in

Signing in is voluntary and happens via GitHub (GitHub, Inc., USA). From GitHub we receive: your GitHub ID, username, display name, profile picture and – if public – your email address. We store this data to provide your account (linking your prompts, stars, and posts). GitHub's privacy policy additionally applies during sign-in. We store a copy of your profile picture on our own server – pages serve it from us, and your browser never contacts GitHub's image servers for it.

5. Content you publish

Prompts, descriptions, and other posts you publish are publicly visible and linked to your username. Do not publish third parties' personal data or any secrets (e.g. API keys) in prompt content.

6. Playground and API keys (BYOK)

The playground uses your own Anthropic API key. It is used exclusively in your browser and transmitted directly to api.anthropic.com – it is never sent to or stored on our server. The optional "remember in browser" feature stores the key locally in your browser (localStorage); you can remove it at any time by unchecking the option. Anthropic's terms apply to the processing of your playground inputs by Anthropic.

7. Email notifications

For events that directly concern your account (e.g. a pull request on your repository or a merge of your contribution) we may send notices to your stored email address. These are strictly functional notifications – we do not send marketing emails or newsletters.

8. Paid plans (Stripe)

If you purchase a paid plan, payment is processed by Stripe Payments Europe Ltd. (Ireland) or Stripe, Inc. (USA). Payment and card data are collected and processed directly by Stripe; PromptHub stores no card data – only your plan tier and a Stripe customer ID. Stripe's privacy policy applies.

9. Automated content screening

Public prompts are automatically screened for security issues (e.g. published credentials, harmful instructions, spam). Flagged content is marked for human review only – no automated removal or other automated decision with legal effect takes place.

10. Translations (DeepL)

Public prompt content may be transmitted to DeepL SE (Cologne, Germany) for automatic translation (German↔English). Only the public prompt text is transmitted – no account data and never content of private repositories. DeepL's privacy policy applies.

11. Retention and backups

We store account data for as long as your account exists. If you delete your account (possible at any time under "Account settings"), we remove your profile data immediately; your repositories become invisible and are permanently deleted after 30 days. Discussion posts remain in anonymized form. Server backups are kept with our Swiss hosting provider and overwritten after 14 days.

12. No ads, no tracking

PromptHub shows no advertising and uses no analytics or tracking services.

13. Your rights

Subject to the Swiss FADP and – where applicable – the GDPR, you have the right to access your stored data, to rectification, to erasure, to restriction of processing (Art. 18 GDPR), to data portability (Art. 20 GDPR), and to object to processing based on a legitimate interest (Art. 21 GDPR). Where processing is based on your consent, you may withdraw it at any time with future effect. Deleting your account is fastest via your account settings; for anything else, email benedikt@promthub.org. Public prompts already forked by others may persist under their license. You may also lodge a complaint with a supervisory authority – in Switzerland the FDPIC, in the EU your national data protection authority.

14. Legal bases for processing

Where the GDPR applies, we base the processing of your data on the following legal grounds: performance of the terms of use (Art. 6(1)(b)) for your account, sign-in, the publication of your content, and functional notifications; our legitimate interest (Art. 6(1)(f)) in secure, abuse-free operation for server logs, automated security/abuse checks, and error analysis; your consent (Art. 6(1)(a)) where we obtain it in individual cases; and compliance with legal obligations (Art. 6(1)(c)), e.g. in connection with payment processing. Under the Swiss FADP, processing is based on the stated purposes and, where required, your consent.

15. Data transfers to third countries (USA)

Some of the services named above are based in the USA (GitHub/Microsoft, Stripe, Inc., Anthropic). For transfers to the USA we rely – where the recipients are certified – on the Swiss-U.S. and EU-U.S. Data Privacy Framework (DPF), which since 2024 and 2023 respectively certifies an adequate level of protection; otherwise on the EU Commission's Standard Contractual Clauses. In the playground (BYOK), you transfer your input to Anthropic directly using your own Anthropic key – that transfer is made by you.

16. Changes

This policy is updated as needed; the version published here applies.