Your work. Your privacy.

Who runs UI Prompts

UI Prompts is an independent platform created and operated by Ibrahim Olukokun, who is responsible for its use of personal information. Contact ibrahim@contrivea.com for privacy questions or requests.

What we collect

• Accounts: your name, email address, password hash, account timestamps and session information. Session records may include an IP address and browser information. We do not store your password as readable text.
• Saved prompts: the examples you save, linked to your account.
• Contributions: your credit name, private email, prompt, design problem, uploaded images, selected categories, optional links and source credits, publication permission, review correspondence and submission status.
• Service records: security/rate-limit records, email delivery information and technical information processed by our hosting and email providers. If you email us, we also receive your message and contact details.

Why we use it

We use account and saved-prompt information to provide the account service you request. We use contribution details to review work, contact you about it and publish approved contributions with credit. We also use relevant records to respond to requests, prevent misuse and keep the service working.

Our legal bases are providing the account service under our agreement with you, legitimate interests in running and protecting the platform and managing review/support, and your consent for optional publication of your contribution and public credit. You can withdraw publication consent by contacting us. Withdrawal does not change the lawfulness of processing before it was withdrawn.

Submitting a prompt does not create an account or subscribe you to marketing. Submission and password-recovery emails are service messages.

What becomes public

Pending and declined contributions are not public. If approved, your credit name, selected profile link, prompt, design images, design context and source credits may be published. Your submission email is kept out of public contribution pages.

Do not upload confidential client work, personal information about others, or assets you cannot share. See contribution permissions.

Service providers and external links

Cloudflare hosts the deployed site, account/submission database and private contribution images. Resend processes password-recovery and contribution notification emails. Our email provider handles messages you send to the contact address. These providers process the information needed to deliver their services.

Providers may process data outside the UK. Applicable locations and transfer arrangements depend on the provider and service configuration; contact us for information about the arrangements applying to your data. We do not sell personal information.

Source, portfolio and external-tool links take you to other services with their own privacy practices. We do not send your prompt to an AI service on your behalf; you choose whether to copy it into another tool.

Cookies and browser storage

Authentication cookies keep you signed in. The current session duration is seven days, with renewal during use. Browser storage can retain a theme preference and older browser-only saves or drafts from earlier previews. Current unsubmitted contribution text and selected images stay in memory and may be lost when you leave or refresh.

The current release has no advertising pixels or visitor analytics integration. Hosting providers still process technical requests and security information. Working examples use fictional local data; follow each example’s notice and avoid entering real sensitive details.

How long we keep information

Account details and saves are kept while you use the account, or until a deletion request is completed, subject to any information needed for security, disputes or legal obligations. Password-reset links expire after 30 minutes; contribution editing links expire after 30 days.

Unpublished submissions are kept while review, requested changes or related correspondence are active. After that, the criteria for retaining them are any unresolved attribution, permission, security or dispute issue. Published material remains available while included in the library, unless removed following review or a valid request. Review and email records are retained only while needed to support those purposes.

Deletion is currently handled manually, rather than through an automatic expiry or self-service account control. Provider backup and recovery copies may remain until replaced or expired under the applicable provider process.

Your choices and rights

You can ask to access or correct information, request deletion, restrict or object to processing, request a portable copy where applicable, or withdraw consent. Some rights depend on the purpose and legal basis. Email ibrahim@contrivea.com; we may need to verify your identity. Please do not send passwords or private editing links.

You can remove individual saves in the site. For account deletion, contribution removal or a privacy complaint, contact us. We generally respond to data-rights requests within one month, subject to lawful extensions or exceptions. You can also complain to the Information Commissioner’s Office.