Privacy Policy

Last updated: 17 Juli 2026

1. Introduction

This Privacy Policy explains how Promptvara Media GmbH collects, uses, stores, and protects personal data when you use Promptvara.com, including our AI prompt library, tutorials, account features, newsletter, affiliate links, and Supporter subscription features. Promptvara.com is operated by Promptvara Media GmbH, an Austrian company. The website is accessible globally, but our data processing is based on applicable Austrian and European data protection law, including the General Data Protection Regulation (GDPR). Legacy domains, including ai-videocourses.com, may redirect to Promptvara.com. These legacy domains are not operated as separate active websites.

2. Controller responsible for data processing

The controller responsible for data processing is:
Promptvara Media GmbH
Puitenweg 4
6094 Axams
Austria
Email: [email protected]
Company register number: FN 675048v
Company register court: Landesgericht Innsbruck
VAT number: ATU83109413

For privacy-related questions, you can contact us at: [email protected] We have not appointed a separate Data Protection Officer. For all privacy matters, please use the contact email above.

3. What data we collect

Depending on how you use Promptvara, we may process the following types of personal data:

  • Account data: email address, login method, Google OAuth ID if you use Google login, account status, and account settings.
  • Google OAuth / email login data: if you sign in with Google, we may receive information such as your email address, Google account ID, and basic profile information, depending on what Google provides and what is required for login.
  • Dashboard and bookmark data: saved prompts, bookmarks, favorites, dashboard settings, and other account preferences.
  • Supporter status: information about whether your account has active Supporter access.
  • Newsletter data: email address, subscription status, signup time, consent records, unsubscribe status, and email interaction data if provided by our newsletter provider.
  • Payment-related data: subscription status, payment confirmation, billing status, and related transaction information received from Paddle. We do not store full credit card details.
  • Technical data: IP address, browser type, device information, operating system, referrer URL, pages visited, time of access, server log data, error logs, and security logs.
  • Analytics data: usage information collected through Google Analytics 4, if enabled and where required based on your cookie consent.
  • Aggregated placement statistics: we may collect aggregated statistics such as impressions, viewable impressions, clicks, and click-through rates to understand how internal links, affiliate links, sponsor placements, and promotional placements perform. These statistics are used in aggregate and are not intended to identify individual users.
  • Communication data: information you send us by email, including your name, email address, message content, and related correspondence.
  • Rights-holder or complaint data: if you contact us about a copyright, trademark, or other rights issue, we process your contact details and message so we can review and respond to the request.

4. How we collect your data

We collect data in different ways:

  • You provide data directly when you create an account, subscribe to the newsletter, become a Supporter, contact us by email, or use account features such as bookmarks or dashboard settings.
  • We collect technical data automatically when you visit the website, for example through server logs, security systems, cookies, analytics tools, or similar technologies.
  • Third-party providers may provide us with limited data where necessary, for example Paddle for payment and subscription status, Google for OAuth login, Brevo for newsletter management, and Google Analytics for website analytics.

5. Why we process your data

We process personal data for the following purposes:

  1. To operate and secure Promptvara.com.
  2. To provide user accounts, login, bookmarks, dashboard features, and saved preferences.
  3. To manage free and Supporter access.
  4. To process payments, subscriptions, cancellations, refunds, and tax/VAT handling through Paddle.
  5. To send newsletters if you have subscribed.
  6. To respond to emails, support requests, business inquiries, or rights-holder complaints.
  7. To analyze website usage and improve the website.
  8. To measure the performance of internal links, affiliate links, sponsor placements, and promotional placements in an aggregated way.
  9. To prevent abuse, scraping, fraud, security incidents, and unauthorized access.
  10. To comply with legal obligations.

6. Legal bases for processing

Depending on the situation, we process personal data based on: Contract performance, when processing is necessary to provide account features, Supporter access, subscriptions, or digital services. Consent, for example for newsletter signup, optional cookies, analytics cookies, and certain embedded content where consent is required. Legitimate interests, for example website security, server logs, fraud prevention, service improvement, abuse prevention, and responding to business or support inquiries. Legal obligations, for example accounting, tax, compliance, and business record obligations.

7. User accounts, Google OAuth, bookmarks, and dashboard features

Promptvara may allow users to create an account using email login and/or Google OAuth. If you use Google OAuth, Google may provide us with basic login information such as your email address, account ID, and basic profile information. We use this only to create and manage your Promptvara account and to let you log in securely. If you use bookmarks, favorites, dashboard features, or saved prompts, this information may be stored in your user account so the feature can work across sessions and devices.

8. Supporter subscriptions and Paddle

Promptvara offers a paid Supporter subscription. Payments are handled by Paddle, our Merchant of Record. Paddle processes payment details, billing information, tax/VAT information, location data, subscription status, and transaction records. Paddle is responsible for processing payments, collecting applicable taxes/VAT, handling billing, and managing payment-related processes. Promptvara does not store full credit card details. Depending on the checkout setup, Paddle may set its own cookies or use similar technologies during the payment and subscription process. These are controlled by Paddle and are subject to Paddle’s own privacy and cookie information. We may receive limited information from Paddle, such as payment confirmation, subscription status, cancellation status, and transaction references, so we can activate or manage Supporter access. For more information about Paddle’s data processing, please refer to Paddle’s own Privacy Policy.

9. Newsletter and Brevo

If you subscribe to our newsletter, we process your email address and related subscription information. We use Brevo as our newsletter/email provider. Brevo helps us manage newsletter subscriptions, send emails, store consent records, and process unsubscribe requests. You can unsubscribe from the newsletter at any time by using the unsubscribe link in the email or by contacting us at [email protected]. After unsubscribing, we may keep limited records where necessary to prove consent, manage suppression lists, or comply with legal obligations.

10. Affiliate links

Some pages may include affiliate links to AI tools, AI models, platforms, software, or related services. If you click an affiliate link and purchase through the third-party provider, we may earn a commission at no extra cost to you. The third-party provider may process your data and may set its own cookies after you leave Promptvara. We do not share your personal data with affiliate partners simply because you click an affiliate link. Promptvara does not currently use affiliate tracking scripts or affiliate cookies on its own website unless this is stated separately in this Privacy Policy or Cookie Policy.

11. Direct sponsor placements

Promptvara may include direct sponsor placements, partner banners, or promotional links arranged directly with sponsors. These placements may link to third-party websites. If you click such a link, you leave Promptvara and the third-party website’s own privacy policy and terms apply. Unless stated otherwise, these direct sponsor placements are simple image/link placements and not Google AdSense, programmatic advertising, or third-party ad-network placements.

12. Google Analytics 4 

We may use Google Analytics 4, to understand how visitors use Promptvara and to improve the website. Google Analytics may collect usage data such as pages visited, approximate location, device information, browser information, session data, and interactions with the website. Where required, Google Analytics will only be used after you have given consent through our cookie consent tool. Google processes analytics data according to its own privacy and data processing terms.

13. YouTube embeds

Promptvara may embed YouTube videos in tutorials, articles, or educational pages. When you interact with an embedded YouTube video, YouTube/Google may process data such as your IP address, device information, browser information, the page visited, and video interaction data. If you are logged into your Google/YouTube account, Google may connect this activity to your account. Where required, YouTube embeds may be blocked until you give consent through our cookie consent tool. Data is only transferred to YouTube/Google after you have interacted with the video or provided consent via our cookie consent tool.

14. Cookies and similar technologies

Promptvara uses cookies and similar technologies to provide core website functions, keep users logged in, remember preferences, protect the website, and, where consent is given, measure website usage.

We use or may use the following categories:

Necessary cookies: These cookies are required for the operation, security, and account functionality of Promptvara. They include cookies used for login, session handling, session restoration, access control, cookie consent storage, and security-related functions.

This includes the Promptvara `auth_token` cookie, which is used as a necessary authentication/session cookie. It helps keep users logged in, restore sessions, and verify access to account features such as bookmarks, account settings, and Supporter access. The `auth_token` cookie may be shared across Promptvara subdomains, such as `www.promptvara.com` and `blog.promptvara.com`, so that login-related functionality can work consistently across the main platform and the blog.

Preference cookies: used to remember choices such as cookie settings or interface preferences.

Analytics cookies: used for Google Analytics / website measurement if consent is given.

Embedded content cookies: may be used by third-party services such as YouTube after interaction or consent.

Affiliate or sponsor tracking cookies: only if such tracking tools are added in the future. At launch, our affiliate and sponsor links are intended to be simple external links unless stated otherwise.

A separate Cookie Policy explains cookies in more detail.

Cookie consent tool: Promptvara uses Orest Bida CookieConsent to manage cookie consent choices. You can accept, reject, or customize optional cookie categories through the cookie banner. You can change or withdraw your optional cookie consent at any time through the “Manage Cookie Settings” button available on our Cookie Policy page.

15. Bot protection with Cloudflare Turnstile

To protect this website from automated spam, abuse, and bot activity, we use or may use Cloudflare Turnstile where implemented, such as for newsletter sign-ups, account creation, forms, or other protected areas. Turnstile may process technical data, including IP addresses, browser information, device information, and security signals, to verify human interaction. The legal basis for this processing is our legitimate interest (Art. 6(1)(f) GDPR) in maintaining the security and integrity of our services. Cloudflare processes this data on its global network and is designed to minimize data collection without using advertising cookies or behavioral profiling. We have concluded a Data Processing Agreement (DPA) with Cloudflare, and data transfers to the US are governed by the EU-U.S. Data Privacy Framework. For further details, please refer to Cloudflare’s Privacy Policy and their Turnstile Privacy Addendum.

16. Hosting, infrastructure, and technical services

We use technical service providers to operate, secure, and deliver Promptvara. These include Cloudflare, DigitalOcean, Hetzner, and Brevo. These providers may process technical data such as IP addresses, request logs, timestamps, and security-related information. Where these providers act as processors for us, we use data processing agreements (DPAs) or equivalent contractual safeguards to ensure that all data processing complies with GDPR requirements.

17. Server logs and security logs

When you visit Promptvara or use account/login features, technical data may be automatically collected and stored in server logs and security logs. This may include:

  • IP address
  • browser type and version
  • operating system
  • referrer URL
  • requested pages/files
  • date and time of access
  • hostname or provider information
  • error messages
  • security events

We process this data to operate the website, maintain security, prevent abuse, investigate technical problems, and protect our services. 

18. Google Fonts

Promptvara uses the Inter font. The font is self-hosted and served from our own domain. When visitors use Promptvara, no requests are sent to Google servers for loading the Inter font, and no IP address is transferred to Google for this purpose.

19. Contact by email

If you contact us by email, we process your email address, message content, and any additional information you provide. We use this data to respond to your inquiry, handle support requests, answer business questions, or process legal or rights-related requests. We do not use email inquiries for newsletter marketing unless you separately subscribe to the newsletter.

20. Data sharing

We do not sell your personal data. We may share personal data with service providers where necessary to operate Promptvara, provide services, process payments, send newsletters, analyze usage, or comply with legal obligations. Relevant service providers may include:

  • Paddle for payments, subscriptions, billing, tax/VAT, and payment-related processing.
  • Brevo for newsletter and email management.
  • Google for Google OAuth, YouTube embeds, and Google Analytics.
  • Cloudflare for domain, security, performance, and storage services.
  • DigitalOcean for database hosting.
  • Hetzner for server/API hosting.
  • Other providers may be added if necessary for the operation, security, or improvement of the service.

21. International data transfers

Some of our service providers, including Google, Paddle, Brevo, Cloudflare, DigitalOcean, or Hetzner, may process personal data outside Austria or the European Economic Area (EEA). Where personal data is transferred to the US or other third countries, we rely on the EU-U.S. Data Privacy Framework for certified providers. For providers not certified under this framework, or for transfers to other countries without an adequacy decision, we use Standard Contractual Clauses (SCCs) approved by the European Commission to ensure a level of data protection equivalent to the GDPR.

22. Data retention

We keep personal data only as long as necessary for the purposes described in this Privacy Policy, unless longer retention is required by law. Typical retention principles:

  • Account data is kept as long as the account exists or as long as needed for legal, security, or support reasons.
  • Bookmarks, dashboard data, and saved settings are kept while the account exists or until deleted.
  • Supporter and payment-related records may be kept as long as necessary for subscription management, accounting, tax, and legal obligations.
  • Newsletter data is kept until you unsubscribe or request deletion, subject to suppression-list and proof-of-consent requirements.
  • Server logs and security logs are kept for a limited period unless longer retention is needed for security, fraud prevention, legal claims, or technical investigations.
  • Failed login attempts are stored for a short security period and are automatically deleted after approximately 5 hours, unless longer retention is required for security investigation, fraud prevention, or legal reasons.
  • Email and support messages are kept as long as necessary to handle the inquiry and for reasonable business or legal record-keeping.
  • Rights-holder complaints and legal requests may be retained as needed to handle the request and document our response.
  • Cookie consent records may be stored to document your consent choices.

After account deletion or cancellation, we may keep limited records where necessary for legal, tax, accounting, security, fraud prevention, dispute, or rights enforcement purposes.

23. Your GDPR rights

Under applicable data protection law, you may have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

If processing is based on consent, you can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. You may contact us at [email protected] to exercise your rights. You also have the right to lodge a complaint with the Österreichische Datenschutzbehörde (DSB), Barichgasse 40-42, 1030 Wien, www.dsb.gv.at.

24. Right to object to direct marketing

If we process personal data for direct marketing, you have the right to object at any time. If you object to direct marketing, we will no longer process your personal data for that purpose. You can unsubscribe from newsletters using the unsubscribe link in our emails or by contacting [email protected].

25. Automated decision-making and profiling

We do not use automated decision-making or profiling (as defined in Art. 22 GDPR) that produces legal effects concerning you or similarly significantly affects you. Our services are provided based on human-guided interactions and manual management of account statuses and subscriptions.

26. Data breach notification

In the event of a personal data breach, we will assess the risk to affected individuals and notify the competent supervisory authority, the Österreichische Datenschutzbehörde (DSB), where required by law. If a breach is likely to result in a high risk to your rights and freedoms, we will also inform affected users in accordance with GDPR requirements.

27. Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, data transmission over the internet can never be guaranteed to be completely secure. This applies especially to communication by email.

28. SSL / TLS encryption

Promptvara uses SSL/TLS encryption to protect data transmitted between your browser and our website. You can recognize an encrypted connection by the “https://” prefix and the lock symbol in your browser.

29. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, especially if we change our services, providers, technologies, legal requirements, or data processing activities. The latest version will always be available on Promptvara.com.

30. Contact

For privacy-related questions, requests, or concerns, please contact:
Promptvara Media GmbH
Puitenweg 4
6094 Axams
Austria
Email: [email protected]