Privacy policy

dionics media UG (haftungsbeschränkt), Birkhuhnweg 8, 31303 Burgdorf, Germany. Represented by Thilo Krause. Email: websites@dionics.ai.

• Your email address. Stored when you unlock the generator, together with the date, the exact consent wording you agreed to, and a truncated form of your IP address (the last part is removed — the final octet of an IPv4 address, everything beyond the /48 prefix of an IPv6 address — enough to evidence consent, not enough to identify you). Unlocking works immediately; the newsletter itself only starts once you confirm it through the link we email you (double opt-in), and the confirmation and unsubscribe links are stored only as hashes. Legal basis: your consent, Art. 6(1)(a) GDPR.
• What you type into the generator. Your goal, your bar, and the prompt that was generated from them, so you can find them again under “Your prompts”. Legal basis: performing the service you asked for, Art. 6(1)(b) GDPR.
• Usage counters. How many prompts you have generated today, per address and per truncated network prefix, so the free daily allowance can be enforced. Legal basis: our legitimate interest in a working free tier, Art. 6(1)(f) GDPR.
• What you submit to the showcase. The project URL, title and description you enter, an optional creator name, and a link to your subscriber record. Submissions are reviewed by hand and appear publicly only after approval. Legal basis: performing the service you asked for, Art. 6(1)(b) GDPR.
• What you send through the contact form. Your name, email address, subject and message, so we can reply. It is sent to our mailbox and nowhere else — no copy is stored in the database, and the address is not added to the newsletter list. Legal basis: your consent and our legitimate interest in answering you, Art. 6(1)(a) and (f) GDPR.
• Anonymous event counts. Counts of page views, unlocks, generations and copy clicks, with no identifier attached to them. They cannot be traced back to a person.

• Anthropic PBC (USA). Your goal and your bar are sent to Anthropic's API to generate the prompt. Do not paste anything confidential into the generator. Transfers to the USA rest on the EU standard contractual clauses.
• Neon (database) and Vercel (hosting). Store and serve the data described above on our behalf, under data processing agreements. The database is hosted in the EU (Frankfurt). Where Vercel processes data outside the EU, the transfer rests on the EU standard contractual clauses.
• Zoho (mail delivery). Sends the confirmation and newsletter emails you asked for through our mailbox. The subscriber list itself stays in our own database and is never uploaded to a marketing platform. Nothing is sold, rented or passed to advertisers, ever.

One cookie, gauntlet_unlock. It is signed, http-only, and holds nothing but a reference to your subscriber record so the generator recognises you on this browser. It is strictly necessary for the service and therefore needs no consent banner. There are no advertising cookies, and no tracking cookies beyond the analytics described below — which exist only if you accept them.

Fonts are self-hosted and blog images are served through our own domain, so simply visiting this site causes no third-party requests from your browser.

This deployment can additionally load Google Analytics (Google Ireland Ltd. / Google LLC, USA) — but only after you explicitly accept it in the consent banner. It stays off until then, runs with IP anonymisation, and you can change your mind right here at any time. If you accept, Google Analytics sets its own cookies (names beginning with _ga) to recognise returning browsers; declining means they are never set. Your choice itself is remembered in your browser's local storage, not on our servers. Legal basis: your consent, Art. 6(1)(a) GDPR.

• Email addresses. Until you unsubscribe. After that we keep the address and the fact of the unsubscribe, so we can honour it — and nothing else.
• Prompts. Until you delete them. Deletion under “Your prompts” is immediate and permanent; there is no soft delete and no recovery.
• Usage counters. Rolled off automatically; they are per-day rows.
• Showcase submissions. Until removed. Write to us and a published entry comes down.
• Contact messages. Kept in the mailbox for as long as the matter is live, then deleted. They are email, not records.

You have the right to access, rectification, erasure, restriction, data portability and objection under Art. 15–21 GDPR, and the right to withdraw consent at any time — every email carries a one-click unsubscribe link, and withdrawal does not affect processing that already happened.

Write to websites@dionics.ai and we will act on it. You may also complain to a supervisory authority — ours is Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

None. A keyword filter checks submitted goals against prohibited categories before generation, and a refusal is explained on screen — but it has no legal or similarly significant effect within the meaning of Art. 22 GDPR.