Privacy Policy

Effective date: 1 October 2026

1. Who we are

IrisPrompt is a prompt builder for AI-generated irises, operated by Olga Goldstein. If you have any question about this policy, write to .

2. What data we collect

• Account data. When you register, we collect your email address.
• Payment data. Subscriptions are paid through Stripe or, if you choose it, PayPal. Your card or PayPal details are entered on Stripe or PayPal and are never stored on our servers. From them we only receive what we need to manage your subscription: its status and, for Stripe, the card brand, the last four digits and the billing country; for PayPal, the subscription id and your PayPal email address (we keep only a one-way code made from it, to let you sign in on another device).
• Cookies and local storage. We use them to keep you signed in, to remember your language and the settings you chose on the site, and to remember your cookie choice. We do not use advertising or analytics cookies.
• Sign-in and free-prompt data. To sign you in on another device we email you a one-time code; to apply the free limit, your browser remembers which free prompts you copied. Both are needed for the service and are stored even if you decline optional cookies.
• Technical data. Our hosting provider receives your IP address and request details as part of normal server logs. The site loads its font from Google Fonts, so your browser also sends your IP address to Google to download it.

3. How we use it

• to provide the service and your account;
• to manage your subscription and process payments;
• to send service emails, such as receipts and notices about important changes;
• to keep the service secure and prevent abuse.

We do not sell your data and do not use it for advertising.

4. Who we share it with

We do not sell or share your personal data, except with the service providers we need to run IrisPrompt: Stripe and PayPal (payments), Resend (delivers sign-in code emails) and Vercel (hosting). Each processes data under its own privacy policy. We may also disclose data where the law requires it.

5. How long we keep it

We keep your account data while your account is active and delete it when you ask us to. Payment records are kept for as long as accounting and tax law requires.

6. Your rights

You can ask us to show, correct, export or delete your data by writing to . You can withdraw your cookie consent at any time by clearing this site's data in your browser; the cookie banner will then ask again.

7. Changes

If we change this policy, we will update the date above and, for important changes, notify registered users by email.