Legal

Privacy Policy

Last updated: September 2026. This policy is written to be read, not skimmed past.

The short version

No accounts exist. There are two ways to use this product, and they handle your data very differently — this page explains both.

Local Rules (the default)

Local Rules runs entirely in your browser. Your prompt text is never sent to us or to any third party for this path — the score, issues, and rewrite are all generated on-device by deterministic checks. Your analysis history and favourites are stored in your browser's local storage and never leave your device; you can clear them at any time.

Bring your own key (optional)

If you choose to enter your own OpenRouter, OpenAI, Anthropic or Gemini API key, your prompt text is sent directly from your browser to that provider's API — not through our servers. Your API key is held in memory for that browser tab only: it is never written to local storage, session storage, a URL, an analytics event, or any server we operate, and we do not proxy or log it. Closing or reloading the tab clears it. That provider's own privacy policy governs how they handle the prompt and key you send them.

What we don't do

• No first-party analytics or advertising trackers on this site
• No sale of data
• No account profiles (there are no accounts)
• No server-side storage of your prompts, reports, or API keys
• No IP-based rate limiting — Local Rules has no server request to rate-limit

Third parties

Local Rules contacts no third party. If you use a direct provider key, your prompt and key are sent only to the single provider you selected (OpenRouter, OpenAI, Anthropic, or Google, depending on your choice) — never to any other party, and never through an intermediary of ours. Hosting for this static site is provided by Cloudflare Pages, which sees standard request logs (such as IP address) like any web host.

Legal basis and your rights (UK GDPR)

Because there are no accounts and no server-side storage of your content, we hold essentially no personal data about you through use of the product itself. Where we process any technical data (such as web server logs), the basis is legitimate interests: operating and securing the site. You have the right to access, correct or request deletion of personal data we hold, and to complain to the ICO — contact us with any request.

Changes

If accounts, payments, or server-side processing are introduced in future, this policy will be updated before those features go live, and the "last updated" date will change.

Prompt Intelligence Studio is operated from the United Kingdom.