Privacy Policy
Last updated: October 6, 2026
This policy describes how S Prompt Generator ("we") collects, uses, and protects the personal data of users ("you"), in accordance with the EU General Data Protection Regulation (GDPR).
1. Data controller
Maxence DAVO, reachable at contact@spromptgenerator.com, is the controller responsible for the processing of the data described below.
2. Data collected
| Data | Purpose | Legal basis |
|---|---|---|
| Email, password (hashed) | Account creation and management, authentication | Performance of a contract |
| Saved settings ("presets") | Retrieving your settings | Performance of a contract |
| Generated prompts (genre, style, lyrics, settings) | Providing the service, personal history | Performance of a contract |
| "Did it work / didn't work" feedback | Effectiveness statistics, service improvement | Legitimate interest |
| Number of generations made per month | Managing the free quota / subscription | Performance of a contract |
| Encrypted fingerprint (hash) of your IP address, at sign-up | Abuse prevention (creating multiple accounts to obtain free generations) | Legitimate interest |
| Stripe customer ID, subscription status, billing history | Managing the paid subscription | Performance of a contract / legal obligation |
Your IP address is never stored in clear text: only an irreversible fingerprint (hash with a secret key) is kept, solely to limit the number of accounts created from the same connection. It is deleted along with your account.
What is never collected or sent to a server: the audio file dropped into the analyzer. Its processing (tempo, key, structure) happens entirely in your browser; the file itself is never sent to or stored on our servers.
We never collect any payment card data: payment is handled entirely by Stripe, which only shares the subscription status with us.
3. Recipients and sub-processors
- Supabase (database and authentication).
- Vercel (application hosting) — United States, standard contractual clauses.
- Stripe (payment and billing) — Ireland / United States, standard contractual clauses.
- Resend (transactional emails — account confirmation, contact form).
No data is sold to third parties.
4. Retention period
- Active account: data kept for as long as the account exists.
- Deleted account: personal data deleted within 30 days, except where a longer legal retention obligation applies (billing data kept for 10 years).
- Prompt history and feedback: kept while the account is active, deletable at any time.
5. Your rights
Under the GDPR, you have the following rights:
- Right of access and rectification
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object
You can exercise these rights directly from your "Account" area (self-service account deletion), or by writing to contact@spromptgenerator.com. A response will be provided within one month at the latest.
You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
6. Cookies
See our Cookie Policy for details on the cookies we use.
7. Security
Data is stored encrypted at rest and in transit (HTTPS), and protected by strict access rules (Row Level Security) ensuring each user can only access their own data.
8. Minors
The service is not intended for individuals under 15 years old without the consent of a holder of parental authority.
9. Chrome extension "S Prompt Generator for Suno"
The optional extension sends the prompt you generated on our website to Suno's create page (suno.com). It only runs on sprompt-generator.com and suno.com. The prompt (style, exclusions, lyrics, settings) is kept only in your browser's local storage until it is sent to Suno. It collects no personal data, does not read or modify any other page, sends nothing to our servers or to third parties, and never presses Suno's generate button. To remove it, uninstall the extension.
10. Changes
This policy may be updated; the last modification date appears at the top of this document.