Privacy
The short version: your prompts are yours, result links are unlisted, deletion is real, and there's no tracking sleaze. The longer version follows. Last updated June 2026.
What we collect
The prompts you submit, the analysis we generate about them, and — if you create an account — your name, email, and password hash. Anonymous roasts are tied to a random browser cookie (so you can claim them if you sign up later) and a salted hash of your IP for rate limiting. We never store your raw IP address with your roasts.
Where your prompt goes
To Google's Gemini API, which performs the analysis, subject to Google's API terms. We don't train models on your prompts, and we don't sell or share them. Practical advice that we also enforce in the grader itself: don't paste API keys, passwords, or other people's personal data into any AI tool, including this one.
Result pages are unlisted, not listed
Every roast gets a share URL with an unguessable ID. Those pages are excluded from search engine indexing and there is no public feed, gallery, or leaderboard. The only way someone sees your roast is if you (or someone you gave the link to) shares it. Treat the URL like the content: if the prompt is sensitive, don't send the link around.
Deleting your data
Signed-in users can delete any roast from their history page — that removes the stored prompt, the analysis, and kills the share link immediately. To delete your whole account and everything attached to it, email us and we'll do it. Anonymous roasts can't be deleted on demand (we'd have no way to verify they're yours), so the safe habit is: sign in before roasting anything you might want to unsend.
Cookies & analytics
Cookies are used for sign-in sessions and the anonymous-roast claim token. Analytics is Vercel Analytics — aggregate page views and a few product events (a roast finished, a share button clicked), no cross-site tracking, no ad pixels. If ads ever arrive, this policy gets updated before they do.