Privacy Policy

The short version

PromptUp does not ask you to create an account. It shows ads from Google AdSense, which use cookies (details below). It also counts visits, using Cloudflare Web Analytics (cookie-free) and Google Analytics (which sets one cookie), so we can see aggregate traffic and improve the site. In the UK, the EEA and Switzerland, ad and analytics cookies are used only after you agree in Google's consent message. What you type into the prompt builder stays in your browser, and the resume builder makes your PDF on your own device without uploading it.

Who runs PromptUp

PromptUp is run by the PromptUp team in India. You can contact us at [email protected].

What stays in your browser

The text you type into the prompt builder is processed on your own device by JavaScript. It is not sent to PromptUp.

The site saves one preference on your device, your light or dark theme, in your browser's local storage under the key promptup_theme. If you answer "Did this prompt work for you?" on a prompt page, your answer is also kept under promptup_votes, so the page can show it next time. If you tap Save on a prompt, its name, type and picture address are kept under promptup_saved, so the Saved prompts page can list them. What you type into the "Fill the blank" boxes on prompt pages is kept under promptup_fills (the last answer for each kind of blank, such as your city), so another prompt can offer it as a one-tap "Last time" choice. Once you have saved a prompt or added PromptUp to your home screen, your browser also keeps copies of the pages you open and of your saved list in its own cache, so they open without internet, and promptup_install remembers on how many days you visited and when you tapped "Not now" on the home-screen offer. These never leave your device. You can remove them at any time by clearing this site's data in your browser settings.

If you share your saved list, the link you copy contains the list name you typed and the names of the prompts in it. Anyone you send the link to can see them. The list is not stored on our side: it travels inside the link itself.

Before and After Photo Maker

The Before and After Photo Maker draws your picture in your browser. The photos you add are not uploaded to PromptUp or anyone else, and we cannot see them. The finished picture is saved straight to your device, or handed to the app you pick in your phone's share menu.

Resume Builder

The Resume Builder runs entirely in your browser. The details you type, such as your name, contact details, work history and education, are turned into a PDF by JavaScript on your own device, and the PDF is saved directly to your device. Your resume is not uploaded to PromptUp or sent to any AI service, and we cannot see it.

If you choose to upload your old resume (a PDF or Word file) or paste its text, the file is read by JavaScript inside your browser, sorted into the form and checked for ATS problems on your device. The file is not sent to PromptUp or anyone else. If you paste a job description into “Match your resume to a job ad”, it is read in your browser too, to find the skills it asks for and compare them with your resume; it is not sent anywhere and it is not saved. To read PDF files the page loads pdf.js, an open-source PDF reader, from our own website.

So that you do not lose your work, the builder keeps your draft in your browser's local storage under the key promptup_resume while "Save draft on this device" is ticked. If you untick it, the draft is deleted and the builder remembers that choice under promptup_resume_keep. Press "Clear my data" to delete the draft at any time. Anyone who uses the same browser on the same device could see a saved draft, so clear it on a shared or public computer.

After a PDF is saved, a short note links to the Support page. If you press "No thanks", the builder remembers that on your device under the key promptup_support_dismissed.

Google Analytics records a few counts about how the builder is used: that someone started a resume, and whether they typed, used the example or uploaded a file; that a PDF was downloaded or shared, with the number of pages and the style you chose; that a resume was uploaded, with the file type (PDF, Word or pasted text), the number of sections found and the ATS score; that a job-ad match was run, with the number of skills found and the match percentage; and, if an upload fails, whether the file was a scanned image. It does not record anything you typed, pasted or uploaded, such as your name, contact details or resume text.

What we do not collect

Apart from blog comments, prompts you choose to send us, and anonymous copy and vote counts (all below), we do not collect names, email addresses, accounts, the prompts you build, your resume, or any photos. When a prompt asks you to upload a photo, you upload it to the AI tool you choose, such as Gemini or ChatGPT. PromptUp never receives it. If you add a photo in the homepage builder, it is only shown as a small preview inside your own browser; it is not uploaded or saved, and it is gone when you leave the page.

Blog comments

If you post a comment on a blog post, we store the name you type, your comment, the post it belongs to and the time. Comments are checked before they appear, and the name and comment are then shown publicly on that post. Please do not include personal details you do not want public.

To stop spam, we also store a scrambled, one-way code (a salted hash) made from your IP address. It is used only to limit how many comments one visitor can post in a short time; we do not store your IP address itself and cannot turn the code back into it. The comment form does not ask for your email address.

Comments are stored in a Cloudflare database. To have a comment removed, email [email protected] with the post and the name you used.

Prompt submissions

If you send a prompt through the Submit a prompt form, we store the prompt, its title, the tool and type you chose, the tip, the name you type (if any), that you ticked the consent box, and the time. If you add a picture, your browser shrinks it and redraws it before sending, which removes camera and location (EXIF/GPS) data; we keep it only until the submission is reviewed. We read each submission ourselves. If we add a prompt to the library, it may be edited, its picture becomes the example on its page, and only the first word of the name you gave is shown as credit. The form does not ask for your email address.

After you send a prompt, the page gives you a private status link. The link is kept in your browser (local storage) so the page can show whether your prompt is live; we store only a one-way code made from it, which cannot be turned back into the link. As with comments, we store a salted, one-way code made from your IP address, only to limit how many prompts one visitor can send in an hour and a day. Submissions are stored in a Cloudflare database. To have a submission or a published community prompt removed, email [email protected] with its title and the name you used.

Copy counts and votes

When you copy a library prompt, or answer "Did this prompt work for you?" with 👍 or 👎, the site tells our server which prompt it was and what happened (copied, 👍 or 👎). We use the totals to show which prompts are most copied and which work best. We do not store your IP address, and nothing you typed or filled in is sent.

So that one person is counted only once per prompt per day, we store a scrambled, one-way code made from your IP address, the prompt and that day's date. Because the date is part of it, the code changes every day and for every prompt, so it cannot be used to follow you from one day to the next or across prompts. The counts are stored in a Cloudflare database, and the per-day copy records are deleted after about 90 days.

Hosting and technical logs

The site is delivered through Cloudflare. Like any web host, Cloudflare processes technical data such as your IP address, browser type, the page requested and the time of the request, in order to deliver the site, keep it secure and prevent abuse. Cloudflare's own privacy policy applies to that processing. The hosting dashboard may show us aggregate traffic totals. We do not use this information to identify or profile individual visitors.

Visit counts (Cloudflare Web Analytics)

To see which pages are used and how fast they load, PromptUp uses Cloudflare Web Analytics. It records things like the page visited, the referring site, your country, your browser and device type, and page-load timings. It does not use cookies or your browser's local storage, and Cloudflare states that it does not fingerprint individual visitors. The figures are used only as aggregate totals to improve the site. They are not used for advertising or to build profiles of individuals.

The measurement is not run for visitors in the European Union. The measurement script is loaded from Cloudflare (static.cloudflareinsights.com) and sends its measurements to PromptUp's own domain. You can block it with a content blocker without affecting how the site works. Cloudflare's own privacy policy applies to its handling of this data.

Visit counts (Google Analytics)

PromptUp also uses Google Analytics to see where visitors come from and which pages they read. It records things like the page visited, the referring site, your approximate location (usually country or city level), your browser and device type, and how you interact with the page. It also counts which buttons are used, such as Copy, Save, Download or Generate, by the kind of button only, and the three answers picked in the quiz on the Start here page (such as "Edit a photo of me" or "Retro and vintage"); what you type into the builder or tools is never sent. Google Analytics sets a cookie (typically named _ga) in your browser to distinguish visits, and this data is sent to and processed by Google.

In the UK, the European Economic Area and Switzerland, Google Analytics starts with its cookies switched off (Google's "consent mode"). Until you make a choice in the consent message described under Advertising below, it sets no cookie and sends only basic cookie-free signals, such as that a page was viewed, which Google uses for aggregate counts. If you agree to analytics cookies, it works as described above; if you do not, it stays cookie-free. The Resume Builder shows no ads and no consent message, so for visitors from those places it always stays cookie-free there. Everywhere else, Google Analytics runs for every visitor. We do not use Google Analytics for advertising, and we do not pass PromptUp visitor data to Google Ads or build ad profiles from it. You can opt out with a browser extension such as Google's Analytics opt-out add-on, or block it with a content blocker without affecting how the site works. Google's own privacy policy applies to its handling of this data.

Advertising (Google AdSense)

PromptUp is free to use and is paid for by advertising. We use Google AdSense to show ads. Google and its advertising partners use cookies and similar technology, such as advertising IDs, to show ads, to limit how often you see the same ad, to measure how ads perform and to prevent fraud. They may use information about your visits to this and other websites to show ads that are relevant to you. Google's use of advertising cookies lets it and its partners serve ads based on your visit to PromptUp and other sites.

In the UK, the European Economic Area and Switzerland, Google shows a consent message on your first visit. It comes from Google's own consent tool (a Google-certified consent management platform that uses the IAB Transparency and Consent Framework) and lists the advertising partners involved. Google uses cookies for personalised ads, and Google Analytics uses cookies, only if you agree. If you do not, Google shows only non-personalised or limited ads, which are not based on your past browsing. You can change your choice at any time with the "Privacy and cookie settings" link that Google shows on the page.

In US states that have their own privacy laws, such as California, Google shows a "Do not sell or share my personal information" option. If you use it, Google restricts how it uses your data for ads on PromptUp.

Ads are placed in marked boxes labelled "Advertisement", away from the Copy buttons, and the Resume Builder has no ads. You can also manage or turn off personalised ads at Google Ads Settings, learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites, or opt out of some third-party vendors' personalised advertising at aboutads.info. PromptUp does not give advertisers any information about you.

Links to other services

Some buttons and links take you to other services, such as Gemini, ChatGPT or Claude. The "Copy and open" buttons copy the prompt to your clipboard and open that service in a new tab. From that point the other service's terms and privacy policy apply, not ours. Some of these links, such as the Higgsfield buttons, are affiliate links: they carry a referral code so the service can tell that you came from PromptUp, and if you buy a plan we may earn a commission at no extra cost to you. We do not receive any personal information about you from these services. Avoid pasting sensitive personal information into any AI tool.

YouTube API Services

PromptUp's own social media tool uses YouTube API Services to upload videos, such as short clips made with the prompts on this site, to the PromptUp YouTube channel. It acts only on that one channel, using access that the channel's owner (the PromptUp team) has granted. It does not read, collect, store or share any data about visitors to this website or about other YouTube users, and no visitor ever needs to sign in to Google or YouTube to use PromptUp.

By using PromptUp's YouTube channel and content you also agree to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy. The channel owner can revoke PromptUp's access to the Google account at any time through the Google security settings. To ask about, or request deletion of, any data connected to the YouTube API Services, email [email protected].

Tips and payments

PromptUp is free, and a tip unlocks nothing. If you choose to chip in from the Support page, the payment is made on the Buy Me a Coffee checkout page. PromptUp never sees your card or bank details, and the Support page itself sends nothing anywhere. Google Analytics counts how often the Buy Me a Coffee button is clicked, as it does for other buttons on the site, but it does not see the payment. As with any payment, the person receiving it can see what Buy Me a Coffee passes on, such as your name, and Buy Me a Coffee's own terms and privacy policy apply to payments made there.

Children

PromptUp is a general-audience tool. It does not knowingly collect personal information from anyone, including children.

If you contact us

If you email us, we use your email address and message only to reply and to handle your request, and we keep them only as long as needed for that purpose.

Your rights

PromptUp does not hold personal data about visitors, apart from any blog comments you post or prompts you send us, so there is normally nothing to access, correct or delete. If you believe we hold information about you, contact us at [email protected] and we will respond.

Changes to this policy

If PromptUp ever adds accounts, other advertising or analytics providers or anything else that collects or stores data, we will update this policy first. The date at the top shows when it last changed.