Privacy Policy

Effective Date: November 14, 2025

Our Privacy Commitment

HashtagCraft is built with privacy-first principles. We believe your content and creative work should remain yours, stored locally on your device, not on our servers.

What Data We Collect

Data Stored Locally (In Your Browser Only)

The following data is stored exclusively in your browser using IndexedDB and never leaves your device:

  • Generation History: Your caption generations, including input descriptions, tone selections, and generated results
  • Favorites: Captions and hashtags you've marked as favorites
  • Preferences: Your dark mode setting and other UI preferences

Important: This data is stored locally on your device. If you clear your browser data or use a different device, this information will not be available.

Data Sent to Third-Party Services

When you use any generator, we only send the fields required to fulfill that specific request:

  • Caption generator: Your post description, tone, length, emoji style, and optional custom emojis.
  • Hashtag generator: The niche/industry, topic, target audience, and which hashtag buckets (trending/niche/branded) you switched on.
  • Bio generator: Name, profession, offering, voice preference, and CTA selection.
  • Post Ideas & Enhancer: The text you paste into those tools plus any switches you enable.
  • AI Provider: OpenAI (proxied through Vercel AI Gateway).
  • Purpose: To return the AI output you asked for—requests stream in real time and are not stored after completion.
  • Retention: OpenAI/Vercel may log requests under their own policies. Review OpenAI's Privacy Policy and Vercel's Privacy Policy.

We do NOT send:

  • Your favorites or generation history
  • Analytics data about how you use the interface
  • Device identifiers beyond what's required for HTTPS
  • Any personally identifying information unless you type it into a form field

What We Do NOT Collect

  • ❌ No user accounts or registration required
  • ❌ No cookies for tracking or advertising
  • ❌ No analytics or usage tracking unless you enable the telemetry toggle
  • ❌ No email addresses or contact information
  • ❌ No server-side storage of your content
  • ❌ No selling or sharing of data with third parties

Optional Analytics (Ahrefs)

Analytics are off by default. If you enable the Privacy Controls toggle in the footer we load the Ahrefs Analytics script to record anonymous page views (URL + referrer). Toggle it off and the script is removed immediately—no data continues flowing.

We do not load any other third-party analytics scripts (including Vercel Analytics). If you never enable the toggle, no analytics script is ever injected.

Your Rights and Control

You have complete control over your data:

  • Access: All your data is stored locally in your browser and accessible to you at any time
  • Delete: Clear your history using the "Clear History" button, or clear your browser data
  • Export: Your history can be exported from your browser's IndexedDB (developer tools)
  • Portability: All data is stored in standard web formats (JSON)

Security

Since all persistent data is stored locally in your browser:

  • Your data is as secure as your device and browser
  • We recommend keeping your browser and operating system up to date
  • Use browser security features like master passwords
  • Be cautious when using shared or public computers

Third-Party Services

OpenAI via Vercel AI Gateway

We use OpenAI's language models via Vercel AI Gateway for AI-powered caption generation. When you use our caption generation features:

  • Your input (post description, tone, etc.) is sent to OpenAI via Vercel AI Gateway
  • OpenAI processes this data to generate caption suggestions
  • Review their privacy practices: OpenAI Privacy Policy and Vercel Privacy Policy

Contact

If you have questions about this privacy policy or our privacy practices, please create an issue on our GitHub repository (for technical privacy questions) or review our open-source code to verify our privacy claims.

Last Updated: November 14, 2025

Summary: We don't collect personal data, don't use tracking, and store everything locally in your browser. Only your caption inputs are sent to AI providers to generate suggestions.

Need to verify academic submissions or long-form content for AI usage? Run them through ContentGuard before sharing so your policies stay consistent across platforms.