Privacy Policy

1. Overview

This Privacy Policy explains what data is collected when you use DSPrompt.app, why it is collected, how it is used, and what rights you have. It applies to all pages, tools, and services available at dsprompt.app.

We wrote this policy to be read by humans, not lawyers. If something is unclear, contact us.

2. Data controller

The data controller responsible for DSPrompt.app is:

DSPrompt.app is operated by Sylvain Delvaux, an individual based in Belgium.

3. What we don't collect

DSPrompt does not collect, store, or transmit:

• Personal identification data (name, email address, phone number)
• Account credentials — there is no account or login system
• The content of your prompts, builder configurations, or chip selections
• Payment or financial information of any kind
• Precise geolocation data
• Cookies used for advertising, profiling, or cross-site tracking
• Device fingerprints or persistent identifiers

All builder interactions happen exclusively in your browser. No data is sent to our servers during tool use.

4. Analytics — Umami

We use Umami Analytics (umami.is) to understand how visitors use DSPrompt — which modules are used, which pages are visited, and general traffic patterns. This data helps us improve the tool.

Umami is built to be privacy-first:

• No cookies or persistent identifiers are set on your device
• Your IP address is never logged, stored, or transmitted
• Data is aggregated — individual users cannot be identified
• Data is not shared with or sold to third parties
• Fully compliant with GDPR, CCPA, ePrivacy Directive, and PECR

The data we receive is limited to: page views, referring domain, browser family, device type, and country-level location derived from an anonymised IP that is never stored. Because no personal data is collected and no cookies are used, consent is not required under GDPR or the ePrivacy Directive for this analytics setup.

For full details, see Umami's Privacy Policy.

5. Affiliate links — Amazon Associates

Certain pages on DSPrompt.app — including the TTRPG builder, the Shop page, and related recommendation content — contain affiliate links to products on Amazon.

DSPrompt.app participates in the Amazon Services LLC Associates Program and the Amazon EU Associates Programme — affiliate advertising programs designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.

• No extra cost to you — the price you pay is identical whether or not you use our link.
• We earn a small commission on qualifying purchases, paid by Amazon.
• We receive no personal data about your Amazon account, browsing, or purchases — only aggregate commission reports.
• Amazon sets its own cookies when you follow a link to their site. These are governed by Amazon's Privacy Notice, not this policy.
• Editorial independence — product choices reflect genuine relevance to the DSPrompt community, not commission rates.

As required by the Amazon Associates Program Operating Agreement, we disclose our participation on any page containing affiliate links.

6. Advertising networks

DSPrompt.app plans to display advertising through Carbon Ads (carbonads.net), operated by BuySellAds — a contextual advertising network focused on developer and designer audiences. Carbon Ads serves ads based on page content, not personal profiles, and does not use behavioural tracking cookies.

This section will be updated before Carbon Ads is activated to include: the pages on which ads appear, data collected by BuySellAds, the applicable GDPR legal basis, and a link to BuySellAds' privacy policy. No other advertising networks are currently in use or planned.

7. Third-party infrastructure

The following third-party services power DSPrompt.app. Each may process limited technical data as a consequence of delivering the service.

• Cloudflare Pages — hosting and CDN. Cloudflare processes standard server log data for security and performance. Certified under the EU-US Data Privacy Framework. Cloudflare Privacy Policy →
• Cloudflare Email Routing — forwards inbound email sent to @dsprompt.app addresses to the operator's private mailbox. Message content is not stored by Cloudflare. Cloudflare Privacy Policy →
• Google Fonts — typography loaded from fonts.googleapis.com. Google may log the font request including your IP. Google LLC is EU-US Data Privacy Framework certified. Google Privacy Policy →
• Buy Me a Coffee — voluntary support platform. Clicking a BMC link redirects you to buymeacoffee.com, governed by their own privacy policy. We receive only confirmation that a payment was made. BMC Privacy Policy →

DSPrompt.app does not embed social media widgets, share buttons, tracking pixels, or third-party scripts beyond those listed above.

8. Communications & contact

DSPrompt.app does not currently operate a contact form, newsletter, or mailing list. If you email us at hello@dsprompt.app, we will receive and retain your email address and message content solely to respond to your enquiry. This data is not used for marketing, not shared with third parties, and retained only as long as necessary to resolve your request.

Should a newsletter or any direct marketing be introduced in the future, this policy will be updated and explicit opt-in consent will be obtained beforehand.

9. International data transfers

DSPrompt.app is operated from Belgium (EU). Some third-party providers are based in the United States. Where data is transferred outside the EEA, we rely on the following safeguards:

• Cloudflare — EU-US Data Privacy Framework certified
• Umami Cloud — GDPR-compliant; no personal data is collected, making transfer restrictions moot
• Amazon Associates — EU-US Data Privacy Framework certified; data received is limited to aggregate commission reporting
• Google Fonts — EU-US Data Privacy Framework certified

10. Your rights (GDPR)

If you are located in the European Economic Area, you have the following rights under the GDPR:

• Access — request a copy of any personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Restriction — request that we limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing

Because DSPrompt collects no personal data during normal use, there is typically nothing to access or delete. For email-based enquiries, exercise any right by contacting hello@dsprompt.app — we respond within 30 days.

You may also lodge a complaint with the Belgian supervisory authority: Autorité de protection des données (APD).

11. Data retention

• Umami analytics — aggregated and anonymous; retained indefinitely for trend analysis. No personal data involved.
• Email correspondence — retained as long as necessary to resolve the enquiry, typically no longer than 12 months.
• Amazon commission data — aggregate reporting retained for accounting purposes per Belgian tax law (7-year minimum).

12. Children's privacy

DSPrompt.app is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted personal data to us, contact hello@dsprompt.app and we will delete it promptly.

13. Changes to this policy

We will update this policy when new features, services, or third-party integrations are introduced — for example when Carbon Ads is activated or if a newsletter is launched. The "Last updated" date and version number at the top of this page reflect the most recent revision.

For material changes (new categories of personal data, new processors), we will post a notice on the DSPrompt homepage for at least 30 days before the change takes effect. Continued use of DSPrompt.app after an update constitutes acceptance of the revised policy.

14. Contact

For any privacy-related question, concern, or rights request:

You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD) — dataprotectionauthority.be.