Legal
Privacy Policy
Last updated September 29, 2026
We collect as little as we can. You can read every page on this site without giving us anything. The only personal data we ask for is your email address, and only if you subscribe to the newsletter.
Who we are
PromptLabster is an independent project run by a small team. We operate the website promptlabster.io and its newsletter and decide how the data described here is used. For any privacy question or request, write to [email protected]; a person on the team reads every message.
What we collect
- Newsletter subscribers. Your email address, the language of the site where you subscribed, the page you subscribed from and the time you subscribed and confirmed.
- Everyone who visits. Standard technical request data: IP address, browser user agent, the page requested and the time. Our hosting and network providers record this to deliver the site and protect it from abuse.
We do not use analytics cookies, advertising trackers or third-party pixels, and we do not build profiles of visitors. Fonts are served from our own server, so reading a page does not send your IP address to a font provider.
Why and on what basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Send the newsletter you asked for | Email, language, subscription details | Your consent, Art. 6(1)(a) |
| Deliver the site and keep it secure | Technical request data | Legitimate interest, Art. 6(1)(f) |
When you subscribe, we send a confirmation email. You are added to the list only after you click the link in it. Every newsletter has a one-click unsubscribe link.
Who processes it
We do not sell, rent or trade personal data. We use a small number of service providers who process data on our behalf under data processing agreements:
- Cloudflare delivers the site, protects it from attacks and routes email sent to our addresses.
- Our hosting provider runs the server, located in the Netherlands (EU).
- Our email delivery provider sends the newsletter. We will name it here before the first issue is sent.
International transfers
Some providers may process data outside the European Economic Area, including in the United States. Where they do, the transfer is covered by the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long we keep it
- Subscriber data: until you unsubscribe. We delete it within 30 days after that.
- Unconfirmed sign-ups: deleted after 30 days.
- Technical request data: up to 30 days, unless we need it longer to investigate a specific security incident.
Your rights
You can ask us to show, correct, export or delete the data we hold about you, to restrict or object to its use, and you can withdraw consent at any time by unsubscribing. Write to [email protected]; we reply within 30 days. If you are in the EU or UK, you also have the right to complain to your local data protection authority.
If you live in California: we do not sell or share personal information as those terms are defined in the CCPA, and we do not use it for targeted advertising.
Cookies
The site does not set any cookies. If that changes, we will update this section and ask for consent where the law requires it.
Children
The site and newsletter are intended for adults and are not directed at children under 16. We do not knowingly collect their data.
Changes
If we change this policy, we will update the date at the top. If a change affects how we use subscriber email addresses, we will tell subscribers by email before it takes effect.