Privacy and cookies
In short: without your consent we measure nothing and set no measuring cookies. If you give consent, we use a random visitor ID to measure how the site and the generator are used, in order to improve them. You can always change your choice via Cookie settings; if you withdraw your consent, we delete your measurement data immediately.
1. Who is responsible?
DEF-prompts (defprompts.vercel.app) is the data controller. Send questions or requests about your data to [e-mailadres].
2. What we process, why and on what legal basis
a. Always (needed to make the site work)
- Your cookie choice (cookie
def_consent): which categories you chose, the version of this text, a random ID of your choice and the time. We also store your choice in our database (without IP address) as proof that you gave or refused consent. Legal basis: legal obligation (demonstrating consent). - Hosting: our hosting provider Vercel processes technical data that is needed for every visit, such as your IP address, to show the page and to prevent abuse. Legal basis: legitimate interest (a safe, working site).
- “Run it” in the generator (only when you click the button): your prompt is sent to Google Gemini to produce an answer. We only keep statistics about it (time, score, number of terms, type of task, length, model used, duration, success or not), no prompt or answer text. To limit abuse (max. 10 times per hour) we store your IP address only as an irreversible hash. Legal basis: performing what you ask and legitimate interest (preventing abuse, improving the generator).
- “Send to my WhatsApp” (only when you click the button): we store the time, the score, the number of terms, the type of task, the length and text of your prompt, your country code and the last 4 digits of your number. We do not store your full number. Legal basis: legitimate interest (improving the generator). You can object to this via [e-mailadres].
b. Analytics (only with your consent)
If you choose “Accept” or switch Analytics on, we set a cookie with a random visitor ID (def_vid) and record per visit:
- which pages you view, for how long, and which website or campaign you came from (only the domain name and any utm codes);
- country (derived by Vercel from your IP address; we do not store the IP address itself), type of device (mobile/tablet/desktop), browser and operating system in broad terms;
- what you do in the generator: the length of your prompt (never the text), the score, which coach questions you answer or skip, whether you click “Run it” or WhatsApp, spelling corrections, and the language of the page (Dutch or English).
In addition, also only with this consent, we use Vercel Web Analytics: cookieless measurement that counts page visits, referring website, country, device and browser, without recognising you across several days.
From this data we automatically calculate an engagement score per visitor ID (for example: does someone come back, does someone use the coach). We only use it to see which parts of the site are valuable. We make no decisions with it that affect you, show no ads with it and sell nothing on. Legal basis: consent.
c. Marketing (only with your consent)
We set no advertising cookies. If you have switched Marketing on and sign up for tips (see d), we link your sign-up to your visitor ID so that we can send you tips that fit how you use the generator. Legal basis: consent.
d. Signing up for tips (only if you do so yourself)
If you sign up in the generator, we store your email address or WhatsApp number, the text with which you gave consent, its version, the page and the time. We only use this to send you an occasional tip about prompting with [DEF]. Legal basis: consent (the tick box is never pre-ticked).
3. How long we keep data
| Data | Retention period |
|---|---|
| Analytics events and engagement score | 12 months, then automatically deleted. Deleted immediately if you withdraw or refuse consent. |
| Sign-up for tips | Until you unsubscribe; then deleted. |
| Proof of your cookie choice | 24 months. |
| Statistics of “Run it” and WhatsApp sends | 12 months. |
Deletion happens automatically in the database every night.
4. Cookies
| Name | Purpose | Type | Duration |
|---|---|---|---|
def_consent | Remembers your cookie choice | Necessary | 12 months |
def_vid | Random visitor ID for analytics | Analytics (consent) | 12 months; removed when you withdraw consent |
def_sid (sessionStorage) | Visit ID, expires after 30 minutes without activity or when you close the tab | Analytics (consent) | Session |
def_coach (localStorage) | Remembers where you placed the coach and whether you collapsed it; only in your own browser, never sent | Necessary (a preference you set yourself) | Until you clear your browser data |
def_owner | Login of the site administrator | Necessary (administrator only) | Max. 30 days |
Switching between Dutch and English uses no cookie: the language is simply part of the web address (/en/).
5. Who we share data with
- Vercel Inc.: hosting and server functions. Vercel is an American company; data may therefore be processed outside the EU, with the legally required safeguards (such as the European Commission’s standard contractual clauses).
- Supabase: our database, on servers in the EU.
- Google (Gemini API): only when you click “Run it” does Google receive your prompt to produce an answer. We use the free version; under Google’s terms, Google may use text submitted to that version to improve its services. So do not put personal or confidential data in your prompt.
- WhatsApp (Meta): when you click “Send to my WhatsApp”, WhatsApp opens with your prompt. What happens there is subject to WhatsApp’s terms.
We do not sell data and do not share it with advertisers.
6. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and you can withdraw your consent at any time. The quickest way to do the latter is via Cookie settings: we then immediately delete all measurement data linked to your visitor ID. To unsubscribe from tips or for any other request: email [e-mailadres]. We respond within one month. If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
7. Changes
If we change this statement in an important way, it gets a new version and we ask for your consent again.