Prompt Injection Check privacy notice
Prompt Injection Check scans pasted text in your browser. The text, findings, and copied draft are not sent to a Prompt Injection Check server or AI API.
Data controller: Prompt Injection Check (the site
operator). For privacy questions or rights requests, contact
contact@promptinjectioncheck.com.
Effective date: August 30, 2026
What stays on your device
The scanner processes the current text, findings, risk indicators, highlights, and cleaned draft in browser memory. We do not add accounts, prompt logging, content-derived analytics, or server-side storage.
Clipboard
“Copy cleaned text” uses your browser’s clipboard permission only when you activate it. The original input remains unchanged. Verify any copied draft manually before use.
Hosting metadata
Our hosting and CDN provider may process ordinary technical request metadata needed to deliver a website, such as an IP address, timestamp, user agent, and requested URL. Prompt Injection Check does not put pasted content in URLs or request logs.
Retention
Prompt Injection Check does not retain pasted text, scan findings, or cleaned drafts on its servers. Browser storage may keep your Analytics preference until you change or clear it. Hosting and measurement providers may retain technical or aggregate records according to their configurations and policies. We do not use scan content to build a profile or advertising audience.
Analytics
If you accept analytics in the site’s consent banner, Prompt Injection Check uses Google Analytics 4 on the public domain to understand aggregate visits and improve the site. Google may process technical information such as page views, browser details, approximate location, and cookie or device identifiers. Pasted text, scan findings, and clipboard contents are never sent to Google Analytics. Analytics are not loaded before consent, on local development, or on preview deployments. You can change your choice using “Analytics preferences,” limit cookies, or block analytics using your browser settings or a content-blocking extension. See Google’s privacy policy for the provider’s terms.
Advertising
Prompt Injection Check displays responsive Google AdSense units. Google may process technical information and use cookies or similar storage to measure and personalize advertising. Where required, Google’s Privacy & messaging consent solution controls the advertising consent choice; advertising storage, ad personalization, and ad user data are denied by default in Google Consent Mode until the appropriate consent signal is available. See Google’s consent requirements for details.
If advertising consent is granted, Google may use cookies or similar identifiers for personalized ads and measurement. If consent is denied, or personalized ads are not available, ads may be contextual or non-personalized and should use less activity-based information. The applicable choices are presented by Google’s CMP. Read Google’s Business Data Responsibility information and privacy policy.
Your rights and requests
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, and to withdraw consent. Email a request to contact@promptinjectioncheck.com. Tell us which right you are exercising and the relevant site interaction; do not include passwords, API keys, or confidential prompt content. We may ask for reasonable information to verify the request and will respond as required by applicable law. You can also change consent choices using the site’s preference controls or your browser settings.
Limits
Do not paste passwords, API keys, confidential documents, or personal data into any online tool. Prompt Injection Check is a warning and education tool, not a guarantee that text is safe.