Privacy

Moldingflask is in beta and run by one person. This describes exactly what the service stores and why. If something here does not match what you see, that is a bug worth reporting.

What we collect

Only what the product needs to work.

• Your email address, to sign you in and to contact you about your account. If you sign in with Google or GitHub, we receive your email address and basic profile from them, and nothing else.
• Your profile: username, display name, and anything optional you choose to add such as a bio, title, avatar or links.
• What you create: prompts, promptlists and workspaces, including private and draft ones.
• What you do here: stars, follows, bookmarks, and a record of prompts you open or copy. That last one is what makes recommendations possible.
• Your country, at country level only, taken from the network connection when you sign up and when you read a prompt. Never a city, never an address, and we do not store your IP address.

What we do not collect

• Payment details. Moldingflask is free during beta and there is nothing to pay.
• Your IP address, beyond the moment it is used to derive a country and discarded.
• Anything from tracking cookies or advertising networks. There are none.

Who can see your prompts

You decide. A prompt is private unless you publish it, and private means private: enforced by the database, not by the interface. Team prompts are visible to that workspace. Public prompts appear on Discover and on your profile.

Administrators can see public content, and can see private content only when reviewing a report about it. Every such action is recorded in an audit log that administrators cannot edit or delete.

Who we share it with

We do not sell your data and we do not share it for advertising. Three services process it on our behalf:

• Supabase stores the database and handles sign-in.
• Vercel hosts the site and provides aggregate page analytics. That analytics is anonymous and does not use cookies.
• Resend sends transactional email, such as workspace invitations, if you trigger one.

What you can do

• See it: everything about you is visible in your library and settings.
• Change it: edit or delete any prompt, promptlist or profile field at any time.
• Leave: ask us to delete your account and we will remove it and everything you created. Email the address at the bottom of this page.
• Turn off notifications: in Settings. Notices about moderation decisions are the exception, because you should always be told when something of yours stops being public.

How long we keep it

Your content stays until you delete it or close your account. Records of what you opened are kept to power recommendations and are not retained indefinitely. Moderation records are kept after an account is deleted, with the person no longer identified, because a log that can be erased by the person it describes is not a log.

Security

Access is enforced in the database itself rather than only in the application, so a mistake in the interface cannot expose someone's private work. Administrator access requires a second factor. We are a small beta and make no claim to be unbreakable; if you find a problem, tell us and we will fix it.

Changes

If this changes in a way that affects you, we will say so rather than quietly editing the date at the top.