How we handle your data, in plain language — see also our Terms & Conditions.
This Privacy Policy explains how Bucket Prompt ("we", "us") collects, uses, and protects your information when you use https://bucketprompt.com or the Bucket Prompt Android app (together, the "Service").
Account information. When you register, we collect your name and email address, and store a securely hashed password (never the plain-text password). If you sign in with Google, Facebook, or GitHub, we receive your name, email, and a provider account ID from that service.
Usage data. We track which prompt templates you view, your pro-view usage and remaining balance, referral relationships, and prompt view counters — this is core to how the Service works (unlocking pro content, referral rewards).
Contact & newsletter data. If you use the contact form or subscribe to our newsletter, we store the email address and message you provide.
Android app data. When you use our Android app we also collect:
The app does not access your contacts, photos, camera, microphone, or precise location. When you copy a prompt or open it in ChatGPT or Gemini, anything you then do in those apps is governed by their own privacy policies.
Technical data. Like most websites, our server automatically logs standard technical data such as IP address, browser type, and request timestamps, including for security purposes such as login rate-limiting.
We use a session cookie to keep you signed in (httponly, same-site, and marked secure over HTTPS) and a small cookie to remember that you've subscribed to our newsletter so we don't show the signup form again. We use Google Analytics (via Google tag / gtag.js) to understand aggregate site usage. We do not use cookies for third-party advertising.
In the Android app we use Google Analytics for Firebase (usage statistics) and Firebase Cloud Messaging (push notifications). Android asks your permission before the app can show notifications, and you can change this any time in your phone's settings. For free users the app also shows ads served by Google AdMob; Pro members see no ads. You can reset or delete your advertising ID, or opt out of personalised ads, in Android Settings → Google → Ads (or Settings → Privacy → Ads). EEA/UK users can change their ad consent any time in the app under Account → Privacy & ad choices.
We do not sell your personal data. We share information only with:
We retain account data for as long as your account is active. If you request deletion (see Section 7), we permanently delete your account and associated personal data within 48 hours, except where we are required by law to keep certain records. Aggregated analytics data that no longer identifies you may be kept longer; Google Analytics data is retained according to our Google Analytics retention settings.
Passwords are stored using industry-standard hashing, all form submissions are protected against cross-site request forgery, and traffic should be served over HTTPS in production. No method of transmission or storage is 100% secure, but we take reasonable technical and organizational measures to protect your data.
The Service is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Questions about this Privacy Policy or your data? We're happy to help.
Reach us at bucketprompt@gmail.com — we typically respond within 24 hours.
Bucket