PROMPTFORGE

Privacy Policy

Last updated: September 2026

PromptForge is operated by Emerald Sites (Irishweb.site). This page explains what we collect, why, and how we use it.

What we collect

  • Account: email, display name.
  • Prompts you create, save or refine.
  • Brand Profiles and Projects you set up.
  • Usage counters (credits used per month).
  • Basic device / browser information for reliability and analytics.
  • If you submit a lead form, the contact details you provide.

Why we collect it

  • Deliver PromptForge and save your work between sessions.
  • Enforce credit / plan limits fairly.
  • Improve prompt quality and safety.
  • Reply to build requests, quotes and support.

Sharing

We do not sell your data. We use trusted processors to run the product (hosting, database, email, analytics, AI inference). We share only what's needed for those services.

Your rights

You can request access, correction or deletion of your data at any time by emailing us via the Contact page.

Cookies

We use essential cookies to keep you signed in and a small number of analytics cookies to understand which features are used.

PromptForge Browser Extension

The PromptForge browser extension is subject to this Privacy Policy in full. This section describes what the extension specifically does with your data.

What the extension stores

  • Your PromptForge API key — stored locally via chrome.storage.local. It never leaves your browser except as a Bearer token on requests to the PromptForge API endpoint you configured (default: https://promptforges.io/api/public/forge).
  • Your endpoint preference — stored the same way.

The extension does not use cookies, third-party localStorage, or any tracking storage.

What the extension sends

When you click Forge or use the "Forge with PromptForge" context menu, the extension sends only the following over HTTPS to your configured endpoint:

  • The text you selected on the page, or the text you typed into the popup.
  • The depth setting you chose (Short / Detailed / Expert).
  • Your API key as an Authorization: Bearer header.

The extension does not send the URL of the page, other page content, browsing history, personal identifiers, or information about other tabs.

What the extension never does

  • It does not read pages in the background.
  • It does not run on pages until you explicitly click its icon or context menu item.
  • It does not include third-party analytics, ads, or tracking SDKs.
  • It does not modify page content.

Your controls

  • Revoke an API key at any time from /dashboard/api.
  • Uninstall the extension to remove all locally stored data.
  • Contact us for server-side log deletion tied to your API key.

Contact

Emerald Sites — Ireland. Reach us through the Contact page.