How we handle your data, in plain language — see also our Terms & Conditions.
This Privacy Policy explains how Bucket Prompt ("we", "us") collects, uses, and protects your information when you use https://bucketprompt.com (the "Service").
Account information. When you register, we collect your name and email address, and store a securely hashed password (never the plain-text password). If you sign in with Google, Facebook, or GitHub, we receive your name, email, and a provider account ID from that service.
Usage data. We track which prompt templates you view, your pro-view usage and remaining balance, referral relationships, and prompt view counters — this is core to how the Service works (unlocking pro content, referral rewards).
Contact & newsletter data. If you use the contact form or subscribe to our newsletter, we store the email address and message you provide.
Payment data. If you purchase a paid plan, payment is handled by our payment processor (Razorpay). We store order/subscription status and identifiers but never your full card, UPI, or bank details — those are handled entirely by the payment processor.
Technical data. Like most websites, our server automatically logs standard technical data such as IP address, browser type, and request timestamps, including for security purposes such as login rate-limiting.
We use a session cookie to keep you signed in (httponly, same-site, and marked secure over HTTPS) and a small cookie to remember that you've subscribed to our newsletter so we don't show the signup form again. We use Google Analytics (via Google tag / gtag.js) to understand aggregate site usage. We do not use cookies for third-party advertising.
We do not sell your personal data. We share information only with:
We retain account data for as long as your account is active. If you request deletion (see Section 7), we permanently delete your account and associated personal data within 48 hours, except where we are required to retain certain records (such as payment/transaction records) for legal or accounting purposes.
Passwords are stored using industry-standard hashing, all form submissions are protected against cross-site request forgery, and traffic should be served over HTTPS in production. No method of transmission or storage is 100% secure, but we take reasonable technical and organizational measures to protect your data.
The Service is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Questions about this Privacy Policy or your data? We're happy to help.
Reach us at bucketprompt@gmail.com — we typically respond within 24 hours.
Bucket