// legal
Privacy Policy
Effective: 1 July 2026 · theneverendingprompt.xyz
1. Who we are
The Never Ending Prompt (“TNEP”, “we”, “us”) is an experimental community AI-art project available at theneverendingprompt.xyz. The project is operated by an independent creator based in France.
Contact: contact@theneverendingprompt.xyz
2. Data we collect
Anonymous voter ID
When you first visit the site we generate a random UUID and store it in your browser’s localStorage under the key voter_id. This ID lets you vote once per round without creating an account. It never leaves your device except as part of your vote record; it is not linked to your name, email, or IP address. Clearing your browser storage removes it permanently.
Prompt submissions
When you submit a prompt mutation we store: the text of your prompt, the mutation type (Mutate or Extend), your voter ID, an optional display name you choose, and a timestamp. Display names are public — if you enter a real name it will be visible on the site.
Votes
Each vote record stores: the submission ID voted on, your voter ID, the round ID, and a timestamp. We use this to enforce one vote per round and to rank submissions.
What we do NOT collect
- —Email addresses or passwords — there are no user accounts.
- —Real names — display name is optional and free-text.
- —Payment information — the game is free.
- —Location data or IP addresses — we do not log request IPs.
- —Behavioural tracking cookies or advertising pixels.
3. How we use your data
- ›To display and rank submissions within each round.
- ›To prevent duplicate voting within a round (via voter_id).
- ›To generate the AI-produced winner image posted to Instagram.
- ›To build the historical chain of prompts shown on the site.
We do not sell, rent, or share your data with third parties for marketing purposes.
4. Third-party services
We use the following third-party services. Each has its own privacy policy.
- —Supabase: Database and API hosting. Stores submissions and votes. Data is hosted in the EU (Frankfurt).
- —Cloudinary: Image hosting and CDN. Stores AI-generated round images.
- —Instagram / Meta: We post winner images to our public Instagram account (@theneverendingprompt.xyz). Meta collects data about people who interact with those posts per their own privacy policy.
- —Vercel: Website hosting. Vercel may collect minimal infrastructure logs (request metadata).
- —Anthropic API: Used server-side to generate captions and seed prompts. Submitted prompts are not sent to Anthropic; only our internal system prompts are used.
5. Data retention
Submissions and votes are retained indefinitely to preserve the prompt chain history — this is a core part of the project. If you want a submission removed, contact us and we will remove the content while keeping an anonymised record for chain continuity.
Your voter ID exists only in your browser. We have no way to link it to you after the fact.
6. Your rights (GDPR / EEA)
If you are in the European Economic Area you have the right to access, correct, or request deletion of your personal data. Because we do not collect email addresses, the only personal data that could be yours is a display name you voluntarily submitted. To exercise your rights, email us at contact@theneverendingprompt.xyz.
7. Changes to this policy
We may update this policy as the project evolves. Material changes will be noted at the top of this page with a new effective date. Continued use of the site after changes constitutes acceptance.