Privacy

Last updated August 28, 2026.

We store the email, display name, and password hash you submit, plus listings, reviews, follows, and purchase records needed to unlock a prompt. Sessions live in an HTTP-only cookie. Google or X sign-in stores the email and name those providers return (X may use a synthetic email if the provider does not send one).

What we do not do in this build

• No inbox verification or password-reset mail.
• No sale of your account list.
• No Connect seller payouts yet.

Stores

Until a database URL is set, data lives in a local JSON file. When a personal Postgres URL is set, the same records live there. Do not put secrets in listing bodies.

Payments

Card data never touches this app. Stripe hosts Checkout. We keep a session id, amount, currency, listing id, and account id so we can unlock the prompt.

Also see Terms.