Privacy Policy
A plain-language explanation of the data needed to run BestPrompts. We collect as little as we can.
What we collect
Public library data. We collect Prompt text, creator name or handle, source links, and associated public media from public posts in order to show the library. Prompt text is kept in its original language and is attributed and linked to its source.
Technical data. Like most websites, our hosting providers receive basic request data such as IP address, browser information, and pages requested to operate and protect the site.
Messages you send us. If you email us about removal, credit, or support, we receive your email address and the information in your message.
Google sign-in and account data
When you choose Google sign-in, Supabase Auth receives your Google account identifier, email address and, where provided, display name and profile picture. Supabase stores these basic profile fields and creates a BestPrompts account with a Supabase user ID. Your email or name may be shown in the tool to identify the signed-in account.
We use this account information to authenticate you, enforce the daily analysis allowance, prevent misuse and make task results available to their owner. Our Google sign-in requests basic identity and profile access; it does not request Gmail, Google Drive, Contacts or Calendar permissions. We do not receive your Google password.
Google account data and uploaded videos have separate purposes. We do not send Google profile information or sign-in tokens to OpenRouter, Gemini or DeepSeek for video analysis. We do not sell Google account data or use it for advertising or AI model training.
How we use it
We use this information to run the prompt library, show attribution and source links, respond to requests, prevent abuse, and understand aggregate site performance. We use Google Analytics to understand aggregate site performance.
We do not sell personal information or use library content to claim ownership of a creator’s Prompt or video.
Library videos and cover images
Library covers load directly from X's image servers. When you start playback, your browser requests the original video from X's media servers. X receives technical request information such as your IP address and browser information, under its own privacy policy. We do not load an embedded post or X's widget script.
If an original cover is missing or cannot load, we display a placeholder. Library videos and cover images are not downloaded or uploaded to our storage for playback or display. Following the source link opens X, where X's own terms and privacy policy apply.
Video to Prompt
The tool requires Google sign-in through Supabase. We store your Supabase user ID with temporary tasks and daily usage counts to enforce one free successful analysis per day. Usage counts are kept for up to seven days; they do not contain videos or prompts. Model usage diagnostics (task status, timing, model identifiers, numeric tokens and provider-reported cost) are also kept for up to seven calendar days to control service spending; they exclude videos, frames, prompts and raw model responses. A video you choose to analyse is stored temporarily and sent to OpenRouter/Gemini for video and image analysis; structured text is sent to DeepSeek for prompt preparation. Upload only videos you have the right to process.
Temporary videos use randomly generated paths in our existing public media storage. We do not publish these paths, but anyone who obtains an object URL may be able to access it before deletion. Do not upload confidential or sensitive material.
Source videos and extracted frames are deleted after processing, with failed deletions retried. Server results expire after 24 hours and are available only to the signed-in task owner, with no permanent history. This browser tab stores the current task ID, account ID and filename to restore it after a refresh. Supabase keeps a sign-in session in this browser until sign-out or expiry. Our service providers may have separate retention policies under their own terms.
Service providers and your choices
We use infrastructure providers such as Cloudflare for site hosting and media delivery, OpenRouter for Gemini video analysis, and DeepSeek for prompt preparation. These providers process data under their own terms and privacy policies. Google and Supabase provide sign-in and account verification for this tool.
You may ask for a library item, credit, or personal support correspondence to be removed or corrected by emailing support@bestprompts.app. Our removal process is described on the Removal requests page.
Data retention
- Account profiles. Supabase keeps your account profile until the account is deleted. Signing out or a task expiring does not delete this profile.
- Uploads and results. Source videos and extracted frames are deleted after processing, with failed deletions retried. Results expire 24 hours after processing finishes; expired task records and files are removed by the cleanup process.
- Usage records. Daily allowance records and model usage diagnostics are kept for up to seven calendar days, as described above.
- Browser storage. Supabase stores session tokens and account information in browser local storage to keep you signed in. Sign out to clear the session. The current task ID, account ID and filename are kept in this tab's session storage to restore the task after a refresh.
- Support correspondence. We keep messages for handling and recording your request. You can ask us to delete personal correspondence. Service providers may retain their own logs or backups under their policies.
How we protect data
The website and API use HTTPS. Supabase handles sign-in, and our API verifies the session and task owner before returning results. Analysis results are kept outside the public website files; service credentials stay on the server.
Temporary upload storage has the public-object limitation explained above. These measures reduce risk, but no online service can guarantee absolute security.
Account access, correction and deletion
To request access to, correction of, or deletion of your BestPrompts account and associated personal data, email support@bestprompts.app using the email address associated with your Google sign-in. We may verify account ownership before processing the request. Account deletion is handled on request rather than through a self-service button.
You can sign out to clear the browser session and remove BestPrompts access in your Google Account's third-party connections. Revoking Google access does not itself delete data already stored by BestPrompts or Supabase; request account deletion separately.
Changes
We may update this policy as the product changes. We will publish the updated version here with a new date.
Last updated · support@bestprompts.app