promptLib privacy

Live at promptlib.llab08.com. A prompt library served from the studio server behind Cloudflare. The gallery is open to everyone without an account; signing in is optional and only saves prompts to your own library. The Studio is a private tool that only llab08 can unlock.

This service is operated by llab08, Hong Kong, and these terms are governed by the laws of Hong Kong. The section below explains this product’s data handling and current availability.

Data this product handles

• Browsing the gallery needs no account. Without signing in, it only answers read requests and stores nothing you send; a search term travels in the request address and therefore appears in the access log like any other request.
• Without signing in, the gallery sets no cookies. The page keeps one localStorage key on your device, promptlib.uiLocale, holding the interface language you picked. Clearing the site’s data in your browser removes it.
• Server logs: the application container keeps standard access logs (request path, time, status and the client address as seen by the server). They rotate automatically and are used only to run the service and to investigate abuse. Cloudflare proxies the hostname and processes connection data under its own privacy policy.
• Rate limiting keeps a short-lived, in-memory count of requests per client address (about one minute). It is never written to disk.
• No analytics scripts. As of the date below the site loads no Google Analytics, gtag, Umami, Plausible or any other third-party analytics script or font. If that ever changes, this section is updated first.
• Images and videos: available example images, and the videos on the Videos page, are served from our gallery host. Loading them sends ordinary image or video requests to that host; it does not upload images from your device or call an image-generation model. Source and attribution links accompany the prompts. Attribution does not grant permission to reuse an image or video; check the rights stated by its source.
• Links to upstream galleries, repositories and original posts lead to third-party sites with their own policies.

Optional account: sign-in and My library

• Signing in is optional and only needed to save prompts. It uses your llab08 account, the same sign-in service that other llab08 apps use, run by llab08 on its own server (supabase.llab08.com). You can sign in with an email address and password, or with Google. With Google, Google shares your email address and basic profile details (name and picture link) under its own privacy policy; nothing is posted to your Google account.
• The sign-in service keeps your email address, your password in hashed form if you set one, and, for a Google sign-in, the name, picture link and Google account identifier that Google shares. It also keeps sign-in records: times, your browser’s user-agent string and a network address, which is yours when your browser goes to the sign-in service (Google sign-in and e-mail links) and our server’s for a password sign-in, which promptLib’s server sends on your behalf. These sign-in records are not deleted automatically: they stay until the account is deleted or llab08 removes them.
• A password you type to sign in, sign up or reset goes to promptLib’s server, which passes it straight to the sign-in service. promptLib does not store it and does not write it to its logs, which record the request path and not what the request contains.
• promptLib keeps what you save: the prompts you mark as favourites, the names of your collections and the prompts in them, each with the time you saved it. It is stored in llab08’s database on our server and only your account can see it, apart from llab08 when it maintains the service. The prompts themselves stay public.
• Email: the sign-in service sends password-reset and address-confirmation emails to the address you give, delivered by Resend, which processes the recipient address under its own privacy policy. There are no newsletters or marketing emails.
• Cookies after you sign in: __Host-promptlib_at (about one hour) and __Host-promptlib_rt (30 days) hold your sign-in session; both are HttpOnly, Secure and SameSite=Lax and belong to promptlib.llab08.com only. While you sign in or reset a password, __Host-promptlib_pkce (up to one hour) holds a one-time check value for the sign-in return page. Signing out removes them and ends the session in this browser only; other llab08 apps stay signed in.
• To slow down guessing, sign-in, sign-up and reset attempts are counted per client address in memory for five to fifteen minutes; the counts are never written to disk.
• Your choices: remove any saved prompt or collection on My library at any time. What you save stays until you remove it or ask us to delete it. To delete your promptLib data or your whole llab08 account, write to hello@llab08.com from the account’s address. Deleting the account also deletes everything saved with it and, because the account is shared, ends sign-in for the other llab08 apps too.

Studio (private, llab08 only)

• The Studio page (/studio, linked from the gallery) is llab08’s own tool for writing image prompts and translations. It shows an access-code form and does nothing until a valid code is entered, or until llab08 signs in with its own llab08 account. No other account can open it, and there is no Studio sign-up.
• Access-code form: the code you type is sent to our server, compared with the configured code and not stored. To slow down guessing, access-code attempts are counted per client address in memory for five minutes; the count is never written to disk.
• Session cookie: a correct code sets one cookie, promptlib_studio (HttpOnly, Secure, SameSite=Strict, sent only to /api/studio). It holds an expiry time, a random value and a signature, no personal data, and lasts 24 hours or until the Studio is locked. While the Studio is open, the tab also keeps the ID of the job being watched in sessionStorage (promptlib.studio.job), which the browser clears when the tab closes. When llab08 opens the Studio with its own llab08 account instead of a code, the account sign-in session described above carries that access.
• AI processing: images uploaded to the Studio, catalog images and prompt text it is pointed at, and any instructions typed there are sent to an AI model provider (Grok models from xAI) through a relay that llab08 runs on its own server. The provider processes them under its own terms.
• Studio history: each job’s inputs, including uploaded images, and its results are kept in the Studio’s database on our server so they can be reviewed and retried. There is no automatic deletion yet: they stay until llab08 deletes them. A prompt translation made in the Studio appears on the public site as soon as llab08’s job finishes; other Studio output, such as the Examples page, reaches the public site only when llab08 publishes it.

Advertising

The site shows no advertising today and loads no advertising script. When advertising is added it will appear only on list and gallery pages, and this section is updated to name the ad provider and describe the consent step before the first ad request is made.

Prompt licences

Prompt text is mirrored from community libraries and keeps the licence or terms of the source it came from:

• CC BY 4.0 for the curated repositories;
• MIT for the pinned full-corpus repositories;
• the curator’s Attribution Required License v1.0 for the Shuixian collection (水仙的AI提示词): non-commercial use with credit and a link to the source, and commercial use only with the curator’s written permission. The curator claims no rights over the collected texts and images, which remain with their original authors;
• no stated licence for the PixelForge catalog snapshot or the NewBananaPrompts 3D Render gallery;
• MIT for the prompts, post text and credits on the Videos page, from the upstream community video list named, with its pinned commit, on the attribution page; each video belongs to the creator credited with it.

Every source, with the pinned commit where the source is a repository, is listed on the attribution page, and the licence of a single prompt is printed on that prompt’s page.

Contact: hello@llab08.com · Updated 11 October 2026 · All privacy notices