Last updated: June 19, 2026

We collect as little as possible. Most of what the app remembers is stored in your own browser and never reaches our servers. Here's the full picture.

1. Stored on your device only

The following live in your browser's localStorage. They never leave your device and we can't see them:

• Theme preference — whether you chose light or dark mode.
• Free-prompt count — if you're using the app without an account, a simple counter of how many free prompts you've used.
• Saved sessions — your chats (the task type, a title, the messages, and a timestamp) so you can revisit them. These are kept only in this browser: clearing your browser data, using a different browser, or switching devices will lose them. We do not copy them to our servers.

2. Your account (only if you create one)

Accounts are managed by Supabase Auth, a dedicated authentication service, and stored in its secure database. Your account record contains:

• Your email address and display name.
• Your password — hashed by Supabase, never in plain text. We never see or store your raw password; it's hashed with bcrypt and checked against known-breached-password lists.
• Account metadata — when the account was created and whether the email has been verified.

Your date of birth is not stored. We ask for it during sign-up only to confirm you're at least 13 years old, then we discard it.

3. Staying signed in

When you sign in, your session is stored in HttpOnly cookies issued by Supabase — they can't be read by scripts in your browser and aren't used to track you across other sites.

4. Security & abuse prevention

To protect the service, your IP address is used transiently, in memory, for rate-limiting, and failed sign-in attempts are counted per email to lock out brute-force attacks. These are not written to a database and reset over time.

5. Your chats and AI processing

To answer you, the messages you send in chat are transmitted to Anthropic's API (the company behind Claude) to generate a response. That processing is governed by Anthropic's own terms and privacy policy. We do not store the content of your chats on our servers — your saved sessions exist only in your browser (see section 1).

6. Analytics & tracking

The app does not currently load any third-party analytics, advertising, or tracking scripts. There is an optional, off-by-default analytics integration in our backend that remains disabled unless we explicitly enable it; nothing is sent from your browser today.

7. Your choices

• Use it as a guest — no account, no server-side record (some features are limited).
• Clear your data — sign out, or clear your browser storage, to remove saved sessions and preferences from your device.
• Delete your account — email us at the address below and we'll remove your account record. (A self-serve delete button is on our roadmap.)

8. Contact

Questions about your data, or want your account deleted? Email privacy@aiskillstudio.com.