Privacy policy
Last updated 13 August 2026
PromptShield is operated by Aurelio Avila, an individual based in Italy ("we", "us"). This page explains what we collect, why, and how you can control it. If anything here is unclear, email aurelio_11@outlook.it.
The short version
The text you paste into the scanner is used only to compute the result you see. It is never written to a database, a log file, an analytics tool, or a backup. We collect the account details needed to run a subscription (email, name, date of birth, billing status) and nothing more — no ad trackers, no analytics scripts, no data sold to anyone.
What we collect
| Data | Why |
|---|---|
| Email, first name, last name, date of birth | Create and secure your account (via Supabase Auth) |
| Prompt text you scan | Sent over an encrypted connection to compute the scan result, then discarded — never stored, logged, or used for any other purpose |
| Subscription status, Stripe customer ID | Billing. We never see or store your card number — Stripe collects that directly |
| Scan history (a short local preview and counts by category) | Stored only in your own browser's local storage, to show you "Recent checks." We never receive this — it never leaves your device |
| Session tokens | Keep you signed in (httpOnly cookies on the web app; a locally-stored token on the desktop app) |
| Team invite tokens | If you're on a Business plan, link-based invites so you can add teammates. We don't collect a teammate's email before they join |
Browser extension
The PromptShield browser extension reads the text box of the AI chat site you're on (ChatGPT, Claude, Gemini, Copilot, Perplexity) only when you click "Check", to send it for scanning as described above. It does not read any other page content, does not run on any other site, and does not track your browsing. Your sign-in tokens are stored in the extension's private local storage, inaccessible to the web pages it runs on.
What we don't do
- We don't run analytics, ad pixels, or third-party trackers on this site.
- We don't sell or rent your data to anyone.
- We don't use your prompt content to train any model or for any purpose beyond showing you the scan result.
Who we share data with
Only the infrastructure providers required to run the service, each acting as a processor on our behalf:
- Supabase — authentication and account database (EU region).
- Stripe — payment processing. Card details are collected and stored by Stripe directly; we never handle them.
- Vercel — application hosting.
We do not share your data with advertisers, data brokers, or any other third party.
How long we keep it
Account data is kept while your account is active. Prompt text is never stored in the first place — there's nothing to retain or delete. To delete your account and associated billing/account data, email aurelio_11@outlook.it; we'll confirm once it's done.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict its processing. Contact aurelio_11@outlook.it to exercise any of these. If you're in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.
Age
PromptShield is not directed at children. You must be at least 16 years old, or the age of digital consent in your country if higher, to create an account.
Changes to this policy
If this policy changes materially, we'll update the date at the top of this page and, where required, notify you by email.