The short version: We don't store your conversations. We don't store your provider API keys. We collect the minimum data needed to operate the service (your email, usage metrics, and billing info via Stripe). Your message content passes through our system transiently and is never written to disk.
This Privacy Policy covers data collected by Prompt Crunch ("we", "us") through our website, API proxy service, and dashboard (collectively, the "Service"). It applies to data we collect as a data controller (your account and usage data).
For data that passes through our proxy on your behalf (conversation content, API requests/responses), we act as a data processor under your instructions. That data is processed transiently and not stored.
| Data type | Stored? | Retention | Purpose |
|---|---|---|---|
| Conversation content (prompts, messages, responses) |
NO | Transient only (in-memory) | Processed for optimization, then discarded |
| Provider API keys (your Anthropic/OpenAI key) |
NO | Not stored | Passed through to provider per-request |
| Email address, name | YES | Account lifetime + 30 days | Account management, verification, communication |
| Prompt Crunch API key | YES (hashed) | Account lifetime | Authentication (stored as SHA-256 hash, not plaintext) |
| Usage metrics (token counts, model, timestamps, savings) |
YES | 12 months rolling | Billing calculation, dashboard, service improvement |
| Payment information | NO (via Stripe) | Per Stripe's policy | Processed by Stripe; we never see or store card numbers |
| IP address | TRANSIENT | Request duration only | Rate limiting, abuse prevention |
We do not use your data for advertising, profiling, or selling to third parties.
To optimize your API requests, conversation messages may be processed through Anthropic's API as part of our optimization pipeline. This is a core part of how the Service works. During this process:
We use the following third-party services to operate Prompt Crunch:
| Provider | Purpose | Data shared |
|---|---|---|
| Anthropic | Optimization processing | Conversation content (transient, per-request) |
| Your AI provider (Anthropic, OpenAI, etc.) |
Forwarding optimized requests | Optimized messages + your provider API key |
| Stripe | Payment processing | Email, payment method details |
| Resend | Transactional email | Email address |
We do not sell, rent, or share your personal data with any other third parties.
If you are in the European Economic Area, you additionally have the right to:
Lawful basis: We process account data under contract performance (necessary to provide the Service). We process usage analytics under legitimate interest (improving the Service and calculating billing).
Data transfers: Our servers are located in the United States. By using the Service, data may be transferred to and processed in the US. We rely on Standard Contractual Clauses where required for EU-US data transfers.
If you are a California resident, you have the right to:
To exercise any of these rights, contact us at privacy@promptcrunch.dev.
Prompt Crunch uses minimal cookies:
The Service is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it.
In the event of a data breach that affects your personal data, we will notify affected users via email within 72 hours of becoming aware of the breach, as required by GDPR. We will also notify relevant supervisory authorities where required.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the Service. The "Effective" date at the top indicates when the current version took effect.
For privacy-related questions or to exercise your data rights: