Privacy Policy
Last updated: July 9, 2026
This policy explains what Promptmon (“we”) collects when you use the game, why we collect it, and the choices you have. You can play as a guest without an account; signing in unlocks ranked play and credits.
Information we collect
- Account data. If you sign in with Google or GitHub, we receive your name, email address, and avatar from that provider to create your profile. We never see your Google or GitHub password.
- Gameplay data. Your chosen display name, avatar/mascot, the prompts you write, match results, Elo/XP, and credit balance.
- Guest identifiers. A random device ID stored in your browser so guest matches work. No account or email is attached to it.
- Payment data. Purchases are processed by Stripe. We receive a confirmation and the credits owed, but we never receive or store your full card number.
- Usage & analytics. Basic product analytics (e.g. via PostHog and Vercel Analytics) and standard server logs including IP address, used for security, rate limiting, and abuse prevention.
How we use it
To run matches and matchmaking, maintain leaderboards, process credit purchases, prevent abuse and spam, keep the service secure, and improve the game. We do not sell your personal data.
Sharing & processors
We share data only with the service providers that make Promptmon work: Supabase (database and authentication), Vercel (hosting), Stripe (payments), and analytics providers. Your public profile — display name, avatar, and rankings — is visible to other players and on the leaderboard. AI model providers process the target images and generated images to score rounds; the prompts you write are shown only to the players in your match.
Where your data lives
Application data is stored in Supabase (PostgreSQL) and the app is hosted on Vercel. Data may be processed in the United States and other regions where our providers operate.
Data retention
We keep account and match data while your account is active. Guest identifiers and transient game state expire automatically. You can ask us to delete your account and associated personal data at any time.
Your rights
Depending on where you live (e.g. under GDPR or CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact us at the address below.
Children
Promptmon is not directed to children under 13, and we do not knowingly collect their personal data.
Changes
We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.
Contact
Questions or data requests: hello@promptmon.com. See also our Terms of Service.