Privacy policy

Who is responsible?

The controller of personal data processed by Clone4.me is:

Contact us at this email for access, correction, deletion, or questions about your data.

Browsing and keeping the site running

Our web server receives your IP address, requested URL, browser information, and time of access to deliver pages, diagnose problems, and prevent abuse. Nginx access and error logs rotate daily with 14 archived rotations. Rate limits also use IP addresses temporarily in server memory.

Our VPS is provided by Infomaniak in Switzerland. Site data, uploaded catalog assets, and daily backups are stored on this VPS. Backups have a rolling 14-day retention period. Authorized site administration is protected by a session cookie lasting up to eight hours; public visitors do not need an account.

Your workspace stays in your browser

Saved prompt edits, the directory view, and your theme use localStorage on this browser, device, and site address, without a set expiry. The storage keys are clone4me.customizations.v1, clone4me.view.v1, and clone4me.theme.v1. Your edits are not uploaded to us when you save, copy, or download a prompt. Clearing site data or ending a private browsing session can remove them. Keep Markdown downloads as your own backup.

Copying a brief to an AI tool of your choice shares it with that provider under its own terms and privacy policy.

Prompt-use counters

We keep aggregate copy and Markdown-download totals for each tool. These counters do not identify unique people and do not store your prompt edits. Random event IDs prevent duplicate retries for 24 hours. Expired IDs are pruned when a subsequent new prompt action is recorded, with a maximum of 10,000 recent IDs stored. The counter does not set a tracking cookie. Aggregate totals remain until reset or removed by the operator.

Clone requests and email

When you send a clone request, we store your idea, optional prompt, optional name and reply email, submission time, and an internal status in our private admin inbox. These details are used to evaluate requests, plan briefs, and reply if you provide an email address. The form is not saved between visits and is sent only when you select Send request. Please leave out secrets and sensitive personal data.

Requests and correspondence are retained while needed to evaluate, follow up, or document the inquiry; there is no automatic inbox deletion schedule. You may ask us to delete a request. Required records and limited backup copies may remain for their applicable retention period.

Email to hello@clone4.me is handled by Spaceship. Spaceship describes processing on servers in the United States, so email correspondence can be transferred there. Our sponsorship form prepares a draft in your email app and sends nothing until you send that email. Submitting a request does not subscribe you to marketing.

Optional Google Analytics

On the public production site, Google Analytics 4 (property G-390RG11LTT) loads only after you allow Analytics in Privacy choices. Advertising and Analytics are separate choices, and rejecting either is equally available. No Google Analytics script or measurement request is sent by our code before this choice. The directory, editing, copying, and downloads work without analytics.

If allowed, Google receives usage and device information, including page views, browser details and IP information during transmission. It uses cookies such as _ga and _ga_* to distinguish browsers. We configure a cookie lifetime of 180 days, renewed during use, disable Google signals and advertising personalization, and send page-view URLs without query strings or fragments. Our code does not send prompt text, request text, names, email addresses, or admin credentials to Analytics. Admin, error pages and local previews do not load Analytics.

The provider is Google Ireland Limited for applicable European services, with processing by Google and its service providers, including in the United States. See Google’s privacy policy and how Google uses information from partner sites. Analytics report retention also depends on the settings in our Google account; contact us for information about your data.

Use Privacy choices at any time to allow or withdraw analytics. Withdrawing stops our measurement and removes accessible Google Analytics cookies from this site. It does not undo data already processed by Google. You may also use Google’s Analytics opt-out add-on.

We remember your consent choice for up to 180 days in clone4me.privacy.v1 in localStorage, then ask again. If browser storage is unavailable, the choice applies to the current visit.

Advertising and external links

Adsterra inline banners and native advertising load only after you explicitly allow Advertising in Privacy choices. They support our free prompts and are marked Advertisement. Rejecting advertising does not prevent browsing, copying, editing or downloading. Earlier Analytics-only choices do not authorize advertising.

After permission, your browser contacts Adsterra’s delivery domain bauval.org and its advertising partners. They receive your IP address and browser/device information and may use cookies, local storage or similar identifiers for ad delivery, personalization, measurement and fraud prevention. Adsterra identifies its providers as AD MARKET LIMITED (Cyprus) and ADMEDIA LLC FZ (United Arab Emirates); processing by it and advertising partners may take place outside Switzerland and the EEA. See Adsterra’s privacy policy and cookie information.

Ads run in sandboxed frames on the separate www.clone4.me origin, keeping their page and local storage apart from saved prompt edits on clone4.me. Our integration does not send saved prompt edits, clone request text, email addresses or admin credentials to the ad network. Withdrawal through Privacy choices stops further ad loads and reloads the page to terminate active ads. Previously set advertising identifiers may need to be removed through your browser’s site-data controls; withdrawal cannot undo data already received by a provider. Optional-service choices expire after 180 days and may be changed independently at any time.

We also offer direct sponsorships and disclosed affiliate links. Clicking one opens a third-party site under its own privacy practices. Advertising stays outside copied prompts. Google AdSense ownership verification remains installed; Google ad-serving code is not enabled.

Purposes, disclosures, and your rights

We process information to provide requested services and replies, operate and secure the directory, improve the site with your optional analytics consent, and meet applicable legal obligations. Where the GDPR applies, these purposes rely on steps at your request or performance of a service, legitimate interests in reliable and secure operation and handling inquiries, consent for optional analytics, or applicable legal duties.

We do not sell your request contents or contact information. Service providers process relevant data to deliver hosting, email, or optional analytics. Data may also be disclosed when legally required or to address abuse or a rights claim. Overseas processing can involve different data-protection rules; the linked providers describe their transfer arrangements. Contact us for details applicable to a specific request.

Subject to applicable Swiss data-protection law and, where applicable, the GDPR, you can request access, correction, deletion, restriction, portability, or object to processing. You can withdraw optional consent at any time. We may need enough information to locate your request and verify your authority. You may complain to the Swiss Federal Data Protection and Information Commissioner or your competent data-protection authority.

Changes and contact

We update this page when our practices change and show the revision date above. Material changes to optional tracking will require an updated choice where applicable. For questions, email hello@clone4.me.