Privacy Policy

Who we are

HowToPrompts is a small, independently run project that publishes a continuously-updated library of AI resources. The service is operated from Türkiye (Turkey), and its audience is global.

For anything in this policy — questions, requests, or complaints — contact cihancs88@gmail.com. For the purposes of the GDPR and Turkey's Personal Data Protection Law (KVKK — Kişisel Verilerin Korunması Kanunu No. 6698), the operator of HowToPrompts is the data controller.

What we collect and why

Account data (Google Sign-In). Signing in is optional and uses Google Identity Services. When you sign in, Google sends us an ID token that our server verifies. We then store, in a local database on our host:

• google_sub — the unique account identifier Google assigns to you
• email — your Google account email address
• name — the display name on your Google account
• picture — the URL of your Google profile photo
• username — a handle we generate automatically for your public profile
• created_at and last_login_at — timestamps for when your account was created and last used

We use this to create and maintain your account, to show your public profile and credit your contributions, and to keep you signed in. We do not receive your Google password, and we do not use Google Sign-In to read your Gmail, contacts, or files.

Usage data (Google Analytics 4). Every page loads Google Analytics 4 (measurement ID G-TSXVXST2XW) through the gtag.js script. This sets analytics cookies (_ga and _ga_G-TSXVXST2XW) and collects information such as pages viewed, referring URLs, approximate location (derived from IP, which Google truncates), device and browser type, and general interaction events. We use this in aggregate to understand what is useful and to improve the site. See our Cookie Policy for the full cookie list.

Server logs. Our host, Hostinger, keeps standard web-server logs (IP address, timestamp, requested URL, user agent, referrer) as part of operating the service and protecting it against abuse.

User-submitted content. If you submit a prompt or similar content, the content you provide — along with your username and profile photo — is published publicly on the site and is visible to anyone. Do not submit anything you are not willing to make public.

Admin analytics tooling. Separately, the site operator uses Google Search Console and the Google Analytics Data API server-side, through a Google service account, to review aggregate traffic. This does not collect anything about you beyond what Analytics already gathers.

Legal bases

Under the GDPR and KVKK we rely on:

• Consent — for analytics cookies and for creating an account with Google Sign-In. You can withdraw consent at any time (see "Cookies" and "Your rights").
• Performance of a contract — to provide the account features you ask for once you sign in, such as your profile and your submissions.
• Legitimate interests — to keep the service secure, prevent abuse, maintain server logs, and understand aggregate usage, balanced against your rights and expectations.

Under KVKK, processing of personal data is also carried out on the basis of your explicit consent and, where applicable, the legitimate-interest and contractual grounds set out in Article 5 of the law.

Cookies

We use two categories of cookies:

• Strictly necessary — a first-party session cookie (vx_sess) that keeps you signed in. It is not used for tracking and cannot be switched off if you want to use an account. An admin-only session cookie exists for the operator's panel; ordinary visitors never receive it.
• Analytics — Google Analytics cookies (_ga, _ga_G-TSXVXST2XW) used for aggregate statistics.

Full details, lifetimes, and how to control them are in the Cookie Policy.

Advertising and third-party cookies

HowToPrompts uses Google AdSense to serve advertisements on the site. In connection with serving ads:

• Google, as a third-party vendor, and its partners use cookies — including the DoubleClick / DART cookie — to serve ads based on your prior visits to this website and other websites on the internet.
• You can opt out of personalised advertising by visiting Google Ads Settings at adssettings.google.com. You can also opt out of a third party's use of cookies for personalised advertising at aboutads.info (and, in the EU, youronlinechoices.eu).
• Third-party vendors' and ad networks' use of cookies on this site is governed by their own privacy policies, not this one. Google's practices are described under "Google's Advertising Policies" and "How Google uses information from sites or apps that use our services" at policies.google.com/technologies/partner-sites.
• For visitors in the EEA and the UK, advertising and any associated cookies are subject to your choice in the site's consent banner. Where you have not granted consent, personalised advertising storage remains disabled through Google Consent Mode.

Third parties and processors

• Google LLC — provides Google Sign-In (identity verification), Google Analytics 4 (usage measurement), and Google Search Console / Analytics Data API (aggregate reporting for the operator). Google processes data as described in its own privacy policy.
• Google AdSense / Google LLC — serves advertising on the site and, with its partners, sets advertising cookies as described in "Advertising and third-party cookies" above.
• Hostinger — provides web hosting and infrastructure, and processes server logs on our behalf.

We do not sell personal data. Advertising is handled by Google as described above; apart from that, we do not share your personal data with third parties for their own independent purposes. There is no newsletter and no payment processor connected to the site.

International transfers

Because we use Google services, some data (for example analytics data and the Google Sign-In token exchange) may be processed on servers operated by Google outside Türkiye and the European Economic Area, including in the United States. Where that happens, transfers are covered by Standard Contractual Clauses (SCCs) and the additional safeguards Google commits to in its data-processing terms. Our host may also process data in the EU or elsewhere depending on the server region.

Retention

• Account data — kept for as long as your account exists. If you ask us to delete your account, we remove the stored record; residual copies in backups age out on the normal backup cycle.
• User-submitted content — remains published until you or we remove it. After removal, cached or archived copies outside our control may persist.
• Analytics data — retained by Google according to the retention period configured for the property (Google's default options range from 2 to 14 months for event-level data); aggregate reports may be kept longer.
• Server logs — kept by the host for a short operational period and then rotated out.
• Session cookie — expires 90 days after your last sign-in, or sooner if you sign out or clear it.

Your rights

Under the GDPR and KVKK you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected (rectification)
• have your data erased ("right to be forgotten")
• object to, or ask us to restrict, certain processing
• receive your data in a portable, machine-readable form
• withdraw consent at any time, without affecting processing already carried out
• lodge a complaint with a supervisory authority — in Türkiye this is the Personal Data Protection Authority (KVKK Kurumu, kvkk.gov.tr); in the EEA it is your local data-protection authority

To exercise any of these, email cihancs88@gmail.com from the address associated with your account. We will respond within the timeframes required by law (generally one month under the GDPR, 30 days under KVKK).

Children

HowToPrompts is not directed at children. We do not knowingly collect personal data from anyone under 13, or under 16 where a higher age of digital consent applies. If you believe a child has provided us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy as the service changes or the law requires. When we do, we will revise the date below and, for material changes, note it on the site. The current version always lives at this URL. See also our Terms of Service.