Privacy Policy

Data Collection

We collect only the data essential to deliver requested outputs: prompt inputs, tool configuration, and standard request headers (IP address, user-agent, timestamps for security). We do not sell, share, or repurpose your prompts for model training. Uploaded files are processed in-memory and discarded immediately after your result is returned — never retained on disk.

Usage Tracking

We log which tools you use and how many requests you make per day. This data is used exclusively to enforce daily limits and display your usage history inside the app. Usage data is tied to your account or guest session ID — never to a third-party advertising profile.

• check_circleTool usage and daily request counts — used only for limit enforcement.
• check_circleActivity history displayed within your personal dashboard.
• check_circleAggregate anonymised stats to improve reliability — never tied to your identity.

Cookies & Local State

We use a signed HttpOnly session cookie for authentication (expires after 30 days of inactivity or on logout), localStorage for guest session IDs and UI preferences, and nothing else. We do not use third-party tracking cookies, advertising cookies, or tracking pixels of any kind.

Third-Party Services

LazyWizard integrates with OpenAI (AI chat and image generation), Stripe (payment processing — we never store full card numbers), and yt-dlp for accessing public media on your behalf. Each provider has their own privacy policy that governs how they handle data transmitted to them. We recommend reviewing OpenAI's and Stripe's policies for full details.

Your Rights

You may access, correct, export, or delete your personal data at any time from the Settings page. Deletion removes all stored activity, usage history, and account metadata within 30 days. To exercise any right or ask a question, email support@lazywizard.app — we respond within 5 business days.

Security

All data in transit is encrypted via HTTPS/TLS. Passwords are hashed with bcrypt (work factor 12). Sessions use signed server-side tokens. Despite these measures, no system is completely secure — we recommend using a unique, strong password for your LazyWizard account.

• check_circleAll data in transit encrypted via HTTPS/TLS.
• check_circlePasswords hashed with bcrypt (work factor 12) — never stored in plain text.
• check_circleSigned server-side session tokens with 30-day inactivity expiry.