PromptRewind is an account-free image tool. This notice explains exactly what we process and why. The short version: we keep as little as possible, for as short a time as possible.
What we process to enforce the daily limits
Everyone gets three delivered images and ten image-to-prompt uses per UTC day. To enforce that without accounts we combine your IP address (seen by our server) and a random identifier stored in a first-party cookie on your device. These two values are run through a keyed one-way hash (HMAC) together with the current UTC date. Only the resulting pseudonymous key is stored — never your raw IP address and never a browser fingerprint. The key changes every day and stored counters expire automatically within 48 hours. There is also a higher per-network daily ceiling so shared connections (a household or office) are not blocked after three images, while endless cookie resets are.
Your prompts, uploads, and images
Your prompt — typed or derived from an image you upload — is sent to the third-party generation service that produces your image (the community-run AI Horde or Cloudflare Workers AI) and is subject to their terms. Uploaded images are resized in your browser, analyzed by Cloudflare Workers AI to derive a text description, processed in memory only, and never stored by us. We do not store your prompt text and we do not store generated images. A one-way digest of the prompt is kept briefly (up to 48 hours) purely to make retried requests safe. There is no gallery and no history; once you leave the page, your image exists only where you downloaded it.
Cookies and analytics
One first-party cookie (pr_device) holds a random identifier used only for the daily limits. We also use two analytics services to understand overall usage: Google Analytics, which sets its own cookies and processes visit data under Google's terms, and Cloudflare Web Analytics, which is cookieless. Neither receives your prompts, uploads, or generated images.
Logs
Operational logs contain timings, error classes, and provider names — not prompts, not IP addresses, not images.
Contact
Questions or removal requests: see the contact page.