Privacy Policy
Last Updated: November 4, 2025
Consent to the use of cookies.
For our website to function properly we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website and to properly document this we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.
When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you to the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. Certain mandatory legal storage periods may apply notwithstanding the aforementioned.
CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6(1)(c) of the General Data Protection Regulation (GDPR).
Data processing agreement
We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
Server log files
Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:
- Your consent status or the withdrawal of consent
- Your anonymised IP address
- Information about your Browser
- Information about your Device
- The date and time you have visited our website
- The webpage url where you saved or updated your consent preferences
- The approximate location of the user that saved their consent preference
- A universally unique identifier (UUID) of the website visitor that clicked the cookie banner
Account Registration and Authentication
We use OAuth authentication to provide secure access to our services.
Data Collected:
- Email address
- Full name
- User ID from the OAuth provider
OAuth Providers:
- GitHub
- Microsoft
Purpose of Processing:
- User authentication and account management
- Providing access to our services
- Communicating with you about your account
Data Retention:
We retain your account information (email, name, user ID) for as long as your account is active. When you delete your account, we immediately delete your data from our systems.
Third-Party Data Sharing:
When you authenticate via OAuth, you are redirected to the OAuth provider and subject to their privacy policy. We receive only the minimal information needed (email, name, user ID) to create and manage your account.
Browser Extension
SpacePrompts Browser Extension
Our browser extension allows you to manage your AI prompts directly from your browser.
Data Collected by Extension:
- Authentication tokens (stored locally in browser)
- Your prompts and associated metadata (synced with our servers)
- Extension preferences and settings
How We Use This Data:
- Authentication tokens: To verify your identity and sync your data
- Prompts: Stored on our servers to provide access across devices
- Settings: Stored locally to customize your experience
Local Storage:
The extension uses Chrome's storage API to cache your authentication tokens and prompts locally for offline access and performance.
Permissions Used:
- Identity: For Google and GitHub OAuth authentication
- Storage: To store your preferences and cached data locally
Data Security:
All data transmitted between the extension and our servers is encrypted using HTTPS. Authentication tokens are stored securely using Chrome's built-in storage mechanisms.