Privacy policy

Nothing you type into a prompt leaves your browser unless you send it somewhere yourself.

Last updated October 6, 2026.

The prompt pages fill in your prompt on your own device, and Think Facility never receives what you type. The Open in ChatGPT and Open in Claude buttons are the one exception, and you control it: the finished prompt goes into the link, so pressing one sends it to OpenAI or Anthropic, whose privacy policies take over from there. Copying a prompt only puts it on your clipboard.

Your dark-mode choice is kept in your browser's local storage. So, once you allow analytics, is a random ID for our own visit counter. The site never asks for your name, and it only asks for an email address if you make an account (Accounts, below, has the detail).

The site is served through Cloudflare, which sees the ordinary request data any web host sees. Its fonts come from Google Fonts, so Google also sees your IP address when your browser fetches them. Most of the rest of this page covers Google's advertising and analytics, plus a small visit counter we run ourselves.

Advertising

Think Facility carries advertising supplied by Google. Google is a third-party vendor and uses cookies to serve ads on this site. Those cookies let Google and its partners serve ads based on your visits to Think Facility and to other sites on the internet.

Right now no page shows an ad unit. Google's ad script still loads on most pages, and when units come back this paragraph will say where they sit. The prompt pages never send Google what you type; the ad script only ever sees the page you are on.

Ads can be personalized or non-personalized. Personalized ads are only served if you allow advertising cookies in the consent message. If you do not, Google is told so before it loads anything, and ad click identifiers are stripped.

You can turn off personalized advertising across the whole web in Google's Ads Settings. You can read how Google uses information from sites that use its services on Google's partner sites page, and read the advertising policies themselves at Google's advertising policies.

Analytics

The site uses Google Analytics 4 to count visits. It records which pages were viewed, the approximate location Google works out from your IP address, the type of device and browser, and how you arrived at the site. It does not record anything you type into a prompt, because that text never leaves your browser in the first place.

In the EEA, the UK and Switzerland, analytics storage is off until you allow it. Until then Google gets a cookieless signal that a page was viewed and nothing that identifies your browser between visits.

We also run our own visit counter. It runs on our Cloudflare account, and its records end up on a computer we control. It sets no cookies and never stores your IP address. It notes the page, the page that sent you, your browser, your screen and window size, a few device details (touch support, processor cores, memory, time zone and language), how long the page stayed open and how far you scrolled, and a rough location and network provider (Cloudflare works those two out from the connection). Once you allow analytics it also keeps a random ID in your browser, so we can tell a returning reader from a new one. With the same permission it checks whether the ads on the page could load, or whether an ad blocker stopped or hid them, and notes the answer with that page view. We use it to count what share of readers block ads. Nothing on the site changes because of it. Its records are deleted after 14 months.

Reactions and feedback

Stories end with three reaction buttons and a Send feedback box. A reaction goes to the same visit counter, with the details it already notes for that page view, and we only ever publish each page's totals. You count once per page and your last pick is the one that counts. Clicks that look automated don't count at all. If you've allowed analytics, your browser also remembers your pick, so the button's still lit when you come back.

Feedback goes to a small service on our Cloudflare account: what you typed, the page you were on, your browser details and a rough country. It keeps a scrambled version of your IP address to stop floods (never the address itself). Only we read it, and none of it appears on the site. There's no name or email field, which means we can't write back, so please leave personal details out. Messages are deleted after 12 months.

Cookies and your choices

What happens before any Google script runs depends on where you are, because the law does.

In the EEA, the UK and Switzerland, all four Google consent signals start denied: advertising storage, advertising user data, ad personalization and analytics storage. Nothing is stored for advertising or analytics until you say yes.

Everywhere else, including the United States, those signals start granted, which is how opt-out privacy law works. You can turn them off whenever you like using the links at the bottom of any page, and we act on it immediately.

Use the Privacy settings link at the bottom of any page to see that message again, change your answer, or withdraw consent entirely. Withdrawing is one click, the same as giving it.

If you are in the EEA, the UK or Switzerland

The legal basis for advertising and analytics cookies is your consent, and nothing is stored until you give it. Consent is asked for through a consent management platform certified by Google and registered under the IAB Transparency and Consent Framework. You can withdraw it at any time using the Privacy settings link, and withdrawing it does not affect anything that happened while it was given.

The legal basis for running the site itself, including the request logging and security filtering Cloudflare does, is legitimate interest in keeping a working website online. That part has no consent message because it is not optional and involves no tracking across sites. Our own counter records a page view without its ID on the same footing: we have a legitimate interest in knowing which pages get read and in spotting bots. Until you answer, that page view carries no ID and is grouped only within the day, as described above.

If you are in California or another US state with a privacy law

Serving personalized ads can count as a sale or a share of personal information under the California Consumer Privacy Act as amended by the CPRA, and under similar laws in other states. Use the Do Not Sell or Share My Personal Information link at the bottom of any page to opt out. The opt-out is passed to Google and its advertising partners as a restricted data processing signal, and the site works exactly the same afterwards.

These laws also give you the right to know what personal information has been collected about you, to have it deleted, to correct it, and not to be treated differently for asking. Think Facility holds no account and nothing you typed into a prompt, and it only has your email address if you've written to us, so the other personal information in play is what Google's advertising and analytics cookies collect, and our own counter's records, which carry only a random browser ID. The fastest way to reach Google's is through your Google account controls. Clearing your browser storage cuts the link between you and ours.

Affiliate links

Think Facility is part of the Amazon Services LLC Associates Program, an advertising program that pays sites a commission for linking to Amazon. As an Amazon Associate we earn from qualifying purchases.

In practice: where a page here links to a product on Amazon, that's an affiliate link. Buy something after following one and Amazon pays us a small percentage. You pay the same price you would have paid anyway.

Following one of those links hands you over to Amazon, who set their own cookies and apply their own privacy policy. We're told how many sales came from the site, never who made them. Your name and your order never reach us.

Every affiliate link is marked as sponsored in the page's HTML, so your browser and any search engine can see what it is. We don't get paid to say a product is good, and no lab, vendor or retailer has ever paid for a mention here. Where we recommend a piece of hardware it's because of what it costs and what it does, and the pages say what we checked.

Accounts

You don't need an account to read anything here. If you make one, you sign in with a link we email you, so all we ask for is your email address. We use it to send those links and nothing else (no newsletter or marketing mail), and we never sell or share the address.

An account holds a username (we pick a random one to start, and you can change it), the topics you follow or hide, the stories and prompts you save, and your game saves if you decide to keep them there. It's stored with Supabase, a database service whose servers for us are in the United States, and the sign-in emails go out through Brevo. Both handle it for us under their data processing terms.

Signing in keeps a session in your browser's local storage so you stay signed in, and signing out removes it. Your feed settings live there too, whether or not you have an account, along with a note of when you last visited that puts the New marks on the news page. None of it goes to Google or to our visit counter.

You can change any of it in your settings. Delete my account, at the bottom of that page, removes the account and everything in it straight away. If you can't sign in, email us and we'll delete it for you. For readers in the EEA, the UK and Switzerland, the legal basis for keeping an account is providing the service you signed up for.

Posts embedded from X and Reddit

The demo and model pages show posts embedded from X and Reddit, and an article sometimes embeds a post from X. An embed runs that platform's own code in your browser, which can set cookies and tell the platform which page you were reading. X's privacy policy and Reddit's privacy policy cover what they do with it.

In the EEA, the UK and Switzerland those embeds wait until you've allowed storage in the consent message, or until you press the button on the page that loads them. Everywhere else they load with the page.

Children

Think Facility is a general-audience site and isn't aimed at children under 13. We don't knowingly collect personal information from anyone that young, and if you think a child has emailed us, tell us and we'll delete the message.

Changes to this policy

If what the site collects changes, this page changes first, and so does the date at the top.

Contact

Send questions about this page, or a request to see or delete anything we hold about you, to thinkfacility@gmail.com. If you email us we keep your address and your message so we can reply, and we don't use either for anything else.