Back to Prompter Hawk
Privacy Policy
Last Updated: July 25, 2026
The short version: Your code never touches our servers. We track your setup progress to help you get started faster, but we never see what you're building. You can opt out of usage tracking anytime.
Your Code Stays Private
This is the most important thing we want you to know:
- Code never leaves your machine - Your source code only goes to your AI provider (OpenAI, Anthropic, Google). We never see it.
- No prompt surveillance - We don't capture, store, or analyze what you ask your AI agents to do.
- No file scanning - We don't know what projects you're working on, what files you edit, or what you build.
- Your API keys are yours - We never see or store your AI provider credentials. You connect directly to them.
What We Do Track
To help you get set up and to improve Prompter Hawk, we track basic usage milestones:
We track:
- Account creation and verification
- App installation and login events
- Whether you've configured an AI backend
- Whether you've created your first mission
- Session activity (active, idle)
We never track:
- Your code or file contents
- Your prompts or AI conversations
- Mission names or descriptions
- Project paths or file names
- Your API key values
Why We Track Setup Progress
We use this information to:
- Help you succeed - If you get stuck during setup, we can send helpful tips
- Improve the product - Understanding where users drop off helps us fix confusing steps
- Remember your preferences - So you don't have to reconfigure things
Opting Out of Usage Tracking
You can disable usage tracking in the desktop app settings at any time. The app will continue to work normally - you just won't get setup assistance emails, and we won't know if something is blocking your progress.
Account Information
When you create an account, we collect:
- Email address - For authentication and important product updates
- Technical metadata - IP address and browser/device info for security and session management
Email Communications
We send different types of emails:
- Transactional emails - Login links, account verification, payment receipts. These are essential and can't be disabled.
- Setup assistance - Helpful tips if you haven't completed setup steps. You can unsubscribe from these.
- Product updates - Major feature announcements (infrequent). You can unsubscribe from these.
Every non-essential email includes an unsubscribe link. We will never sell your email or send you unrelated marketing.
Website Analytics
Section last updated: July 25, 2026
Our website uses privacy-friendly analytics. Here's what we do and don't collect:
- What we track: Page views, button clicks, scroll depth, time on page, referral sources, and which ads brought you here
- Signup and purchase tracking: When you sign up or complete a purchase, we record which ad campaign led to the conversion. We store a masked version of your email (e.g., "n***e@domain.com") and, for purchases, hashed payment identifiers.
- What we don't store in analytics: Your full email address, payment card details, or billing address
- No cross-site tracking: We don't follow you around the internet
About Pseudonymized Data
The masked email and hashed identifiers we store are pseudonymized personal data - not anonymous. This means:
- We can't casually look up your records by email (the mask hides most characters)
- The data could theoretically be linked back to you with effort
- You have the right to request access or deletion (see Your Rights below)
We use this approach to measure ad effectiveness while minimizing what we store. We're being direct about what it is and isn't.
Ad Attribution
To improve our advertising, we track which ads lead to signups and purchases. This uses browser session storage (cleared when you close your tab) to remember which ad brought you here - we don't use persistent cookies for this tracking. The ad identifier stays on your device until you complete an action, then we record it alongside that action.
Data Storage and Security
Your account data is stored in a Vercel Postgres database. Session data is stored locally on your machine. We use industry-standard encryption for data in transit and at rest.
Third-Party Services
Your data flows through these services:
- Stripe (payments): Processes your payment, stores card details and billing address. We receive confirmation of successful payments but never see your card number.
- Vercel + Neon Postgres (hosting and storage): Hosts our website and stores our analytics database (including the pseudonymized records described above). Located in the US.
- Reddit (advertising): When you click a Reddit ad, their tracking pixel may fire. The ad identifier arrives in your URL and we store it for attribution.
Data Retention
- Account data - Kept while your account is active
- Usage events - Retained for 90 days, then automatically deleted
- Website analytics - Retained for 90 days, then automatically deleted
If you delete your account, your personal data will be removed within 30 days. Anonymized analytics may be retained for longer.
Analytics and Purchase Event Retention
- Website analytics (page views, clicks): 90 days, then deleted
- Signup events: 90 days, then deleted
- Purchase events: 24 months with full pseudonymized detail, then aggregated (totals by campaign with no individual identifiers)
Why 24 months for purchases? We need this data for annual financial reconciliation, potential chargeback disputes, and measuring long-term ad campaign ROI. After 24 months, we keep only aggregate statistics (e.g., "Campaign X led to $Y in revenue") with no way to identify individual purchasers.
Your Rights and Choices
You can:
- Request your data: Ask what analytics records we have linked to your email
- Request deletion: Have your pseudonymized analytics records deleted (note: this doesn't affect your Stripe payment history, which Stripe controls)
- Delete your account: Remove your account and associated data from our systems
- Opt out of usage tracking: Disable tracking in the desktop app settings
- Unsubscribe: Stop receiving non-essential emails
How to Contact Us
To request access to or deletion of your data, or for any privacy questions:
We'll respond to data requests within 30 days.
Changes to This Policy
We may update this policy as Prompter Hawk evolves. If we make significant changes that affect how we handle your data, we'll notify you via email before they take effect.
TL;DR: Your code never touches our servers. We track setup progress to help you succeed, but we never see what you're building. You can opt out anytime. We don't sell your data or spam you.
Back to Prompter Hawk