Security & Privacy

Your data stays on your device. Always.

100% Private & Local
PromptForge is a completely client-side web application. All your prompts, style references, and settings are stored in your browser's local storage on your device only. Nothing is uploaded to any server — not even ours.
What Data is Stored?

When you use PromptForge, the following is stored locally in your browser:

Saved Prompts — Any prompts you save to your library
Style References (sref) — Image URLs, weights, and descriptions you save
Uploaded Documents — Any files or web content you add for reference
LLM Settings — API URLs and model names (if you use local LLM integration)
App Preferences — Custom dropdown options, theme choice (light/dark mode)
Model Registry — Custom AI models you've added and version check data
What is NOT Stored on Servers
We do not collect, transmit, or store any of your data on our servers. There is no user database, no cloud storage, no tracking cookies, and no analytics that identify you personally.
How Your Data Moves

Your data only leaves your device in these situations (and only when you choose):

ActionWhat Happens
You click "Export"Downloads a JSON file to your device (stays on your computer)
You share your export fileOnly if you manually send the file to someone else
Browser sync is enabledChrome/Firefox may sync your localStorage to your own account (encrypted)
Fetching web contentApp may use CORS proxies to fetch public web pages (no personal data sent)
Using local LLMConnects to localhost only — your computer, not external servers
File System storageIf you choose "File System" mode, data is saved to a local folder you select
Security Features
XSS Protection — All user input is safely escaped to prevent malicious scripts
Sandboxed Output — HTML previews run in isolated iframes with no script execution
Content Security Policy — Restricts what resources the app can load
No External Dependencies — Only loads Bootstrap and icons from trusted CDNs
Offline Capable — Service worker caches the app for full offline use
Important Notes
Your Data is Device-Specific
Because everything is stored locally, your prompts and settings are tied to this specific browser on this device. If you switch browsers, computers, or clear your browser data, you'll need to re-import your library from an export file.

Recommendation: Regularly export your library as a backup — or use File System storage mode for easy portability.
Don't Store API Keys
While your data is private, localStorage is not encrypted. If you're using LLM integration, only connect to local instances (localhost). Never store production API keys for commercial services in the app.
Common Questions

No. We cannot see, access, or recover your prompts. They exist only in your browser's localStorage on your device.

Your saved library data will be deleted. That's why we recommend exporting regularly or using File System storage mode.

Yes! Once the page loads, PromptForge works completely offline via its service worker. Fetching web content and version checking require connectivity.

Browser localStorage is not encrypted by default. Since your data never leaves your device, it's protected by your device's security. Use device encryption for maximum security.

Because we don't collect, transmit, or store any personal data on our servers, GDPR and most privacy regulations don't apply in the traditional sense.

PromptForge supports three storage backends: Browser localStorage (default, ~5 MB limit), File System (saves to a folder you choose), and Electron app data (for the desktop app). Switch modes in the Config tab.
Back to PromptForge