Prompt Injection Report
Home Lab log Topics
☰
Tools Glossary Resources Lab
Offensive Sec network
Adversarial ML AI Attacks AI Sec JailbreakDB Jailbreaks FYI

Privacy Policy

Last updated: 2026-05-07

This privacy policy describes how Prompt Injection Report (https://promptinjection.report) collects, uses, and protects information about visitors and subscribers. Operated as part of the AI Sec Network. For questions, contact hello@promptinjection.report.

Information we collect

Automatically collected (analytics)

We use privacy-respecting analytics (Plausible) which does not set cookies and does not track individuals across sites. We collect aggregate traffic data: pages viewed, referrer source, browser type, country (not city), and screen size. We do not collect or store IP addresses.

Voluntarily provided (newsletter)

If you subscribe to our newsletter, we collect: email address, the cluster preferences you selected, the source page you signed up from, and the timestamp. This data is stored in our database (Cloudflare D1) and synchronized to our email provider (MailerLite) for delivery.

Voluntarily provided (newsletter via direct embed)

Some sites in our network may embed newsletter signup forms directly. These submit to the same backend as the central subscribe page and are subject to the same data handling.

Cookies

We do not use tracking cookies. We may set a small functional cookie if you opt to dismiss a newsletter banner — this expires after 30 days and contains no identifying information.

How we use information

We do not sell, share, or rent your personal data to third parties for marketing purposes. We do not use your data to train AI models. We do not run behavioral advertising.

Service providers

We use the following processors to deliver this site and our newsletter:

Your rights

Depending on your jurisdiction, you may have the right to: access the data we hold about you, correct it, delete it, restrict its processing, port it to another service, or object to its processing.

To exercise any of these rights, email hello@promptinjection.report. We respond within 30 days of a verifiable request.

EU/UK GDPR specifics

For visitors in the EU/EEA and UK: we process your email address on the basis of your consent (newsletter subscription) and our legitimate interest (responding to direct correspondence). You may withdraw consent at any time by unsubscribing or contacting us.

You also have the right to lodge a complaint with your supervisory authority. The list is maintained at edpb.europa.eu.

California CCPA / CPRA specifics

For California residents: we do not sell or share personal information as defined under the CCPA. You have the right to know, delete, correct, and opt-out of any sale (which we do not conduct). Contact hello@promptinjection.report to exercise these rights.

Children

This site is not directed at children under 13 (under 16 in some jurisdictions). We do not knowingly collect data from minors. If you believe we have, contact us and we will delete it.

Data retention

Newsletter subscriber data is retained for as long as you remain subscribed plus 30 days after unsubscribe (for unsubscribe verification and abuse prevention). Aggregate analytics data is retained for 24 months. Inquiry correspondence is retained for 12 months.

Security

We use HTTPS for all traffic, encrypted storage for subscriber data, and access controls limiting which network operators can read data. We have procedures for breach detection and, if a breach occurs that affects you, will notify you per applicable law (within 72 hours for jurisdictions requiring it).

Changes

We may update this policy. Material changes will be flagged at the top of this page for at least 30 days, and we'll notify newsletter subscribers via the next dispatch.

Contact

Email: hello@promptinjection.report
Operator: AI Sec Network

This policy is provided as-is for informational purposes and does not constitute legal advice. If you require legal advice, consult counsel.