PromptRewind is an account-free image tool. This notice explains exactly what we process and why. The short version: we keep as little as possible, for as short a time as possible.

What we process to enforce the daily limits

Everyone gets three delivered images, ten image-to-prompt uses, and five music-to-prompt analyses per UTC day. To enforce that without accounts we combine your IP address (seen by our server) and a random identifier stored in a first-party cookie on your device. These two values are run through a keyed one-way hash (HMAC) together with the current UTC date. Only the resulting pseudonymous key is stored, never your raw IP address and never a browser fingerprint. The key changes every day and stored counters expire automatically within 48 hours. There is also a higher per-network daily ceiling so shared connections (a household or office) are not blocked after three images, while endless cookie resets are.

Your prompts, uploads, and images

Your prompt, typed or derived from an image you upload, is first offered to our own generation engine. To hand it over, the prompt (and, for image-to-prompt or music-to-prompt, your upload) is placed in a private, access-controlled job store together with the finished image or description. Music files are analyzed only by our own engine and never sent to a third party. Those files are deleted as soon as your result is delivered and in every case automatically within 24 hours. If our engine is unavailable, the prompt is sent instead to a third-party generation service (OpenAI, the community-run AI Horde, or Cloudflare Workers AI) and is subject to their terms; uploads are then analyzed by Cloudflare Workers AI in memory. We keep no gallery, no history, and no copy of your prompt beyond that window. A one-way digest of the prompt is kept briefly (up to 48 hours) purely to make retried requests safe. Once you leave the page, your image exists only where you downloaded it.

Beta sign-ups

Music to prompt and video to prompt are in private beta. When you pick a file on those pages, the file is not uploaded: it never leaves your browser. If you choose to join the beta, the only thing you send is your email address. We pass it to our email provider, Brevo (Sendinblue GmbH, EU), to send you a confirmation and later the beta link, and we keep a keyed one-way digest of the address (never the address itself) to avoid duplicate sign-ups and to limit sign-ups per network per day. Reply to any beta email or use the contact page to be removed; your address is then deleted from Brevo.

Cookies and analytics

One first-party cookie (__session) holds a random identifier used only for the daily limits. We also use three analytics services to understand overall usage: Google Analytics, which sets its own cookies and processes visit data under Google's terms, and Cloudflare Web Analytics and Ahrefs Web Analytics, which are both cookieless. None of them receives your prompts, uploads, or generated images.

Logs

Operational logs contain timings, error classes, and provider names, but not prompts, not IP addresses, not images.

Contact

Questions or removal requests: see the contact page.