Privacy Policy#

Effective date: October 17, 2026 · Last updated: October 18, 2026

This Privacy Policy explains what happens to your information when you visit promptandload.com (the “Site”), operated by one individual (the “Operator”, “we”). It is written to meet the transparency requirements of Indonesia’s Personal Data Protection Law (Undang-Undang No. 27 Tahun 2022, “UU PDP”), in force since October 2024, to the extent that Law applies to this Site, alongside generally recognised privacy standards. The short version: this is a personal blog built to collect as little about you as possible, and nothing below is dressed up to sound friendlier than it is.

Who is responsible#

The Operator of promptandload.com is the data controller for the limited processing described here. To reach us about anything in this policy: [email protected].

Information we collect#

Directly: nothing. The Site has no accounts, no contact form, and no analytics software. We do not ask for or store your name, address, phone number, or payment details — there is nothing on this Site to store them in.

If you contact us by email: whatever you put in the email, obviously. That correspondence is handled through our email providers and kept only as long as a normal email conversation (or legal obligation) requires.

Comments (when you leave one): comments run through giscus and are stored as GitHub Discussions in our public repository (github.com/cortanayourai/Promptandload). Processed: your comment text and, if you sign in with GitHub, your GitHub display name and avatar — handled by GitHub, Inc. under GitHub’s Privacy Statement and by giscus under its terms. We moderate this ourselves and can edit or delete any comment.

Automatically, via infrastructure: Cloudflare (which serves the Site over HTTPS) processes IP address, user agent, requested URL, and timestamps for delivery, security, and abuse prevention. Our own server keeps no access logs beyond short-lived operational output.

Why we use it — legal bases#

Under UU PDP, personal data may only be processed on a lawful basis. Ours:

  • Correspondence you initiate — processing your email is based on your consent (given by sending the message) and our legitimate interest in answering you. We use it for nothing else.
  • Site delivery and security — technical log data is processed on the basis of our legitimate interest in keeping the Site up, secure, and abuse-free.
  • No other purpose. We do not profile you, do not build advertising audiences, and do not sell, rent, or trade personal data to anyone.

How we process — our principles#

We follow the processing principles UU PDP requires of every controller: processing that is lawful and in good faith, limited to the stated purpose, transparent, accurate, secure and accountable, and no longer than needed. The sections below are the concrete form those principles take here.

Cookies and advertising#

Today: the Site sets no cookies and runs no advertising.

When ads are displayed: the Site may run advertising, including Google AdSense. When that happens, third parties — including Google — may place cookies or use similar technologies (such as device identifiers) on your browser to serve and measure ads.

Specifically, if Google AdSense is active:

  • Google and its partners may use cookies to serve ads based on your prior visits to this or other websites.
  • Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to our Site and/or other sites on the Internet.
  • You may opt out of personalised advertising by visiting Google Ads Settings. You may also opt out of a third-party vendor’s use of cookies for personalised advertising at aboutads.info.

This disclosure exists before any ad code ever runs, per Google AdSense program policy.

Sharing and international transfers#

Service providers involved in running the Site: Cloudflare (hosting, DNS, HTTPS/TLS delivery, security) and Google (email correspondence if you write to us; advertising only if/ads are enabled, subject to the disclosure above). We sell nothing to anyone — there is no data brokerage on this Site because there is no data inventory to broker. For comments, the service chain is giscus → GitHub, as described under “Comments” above.

These providers may process data outside Indonesia. Where UU PDP requires it, any such transfer is made only where the destination country has an adequate level of protection, or with your consent, subject to the Law’s safeguards.

How long we keep it#

Email correspondence is kept only as long as a normal conversation (or a legal obligation) requires, then deleted or restricted. Technical logs are short-lived by design. When there is no continuing purpose or obligation, data goes.

Your rights under UU PDP#

Where UU PDP applies to you, you have the right to:

  1. Obtain information about what personal data we hold about you and how it has been processed;
  2. Access and receive a copy of that personal data;
  3. Request correction of inaccurate or incomplete data;
  4. Request deletion of data that is no longer necessary for the purposes of processing, or restriction of its processing;
  5. Object to processing — including processing for direct marketing;
  6. Not be subject to a decision based solely on automated processing (including profiling) that produces legal or similarly significant effects — the Site performs no such processing;
  7. Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
  8. Seek a remedy through the courts, including compensation, as UU PDP provides; and
  9. Lodge a complaint with the supervisory authority established under UU PDP.

To exercise any of these, email [email protected] — a human will respond within the timeline the Law requires. Rights under other applicable regimes (e.g. GDPR, CCPA) are honoured the same way where they apply.

Security and data breach notification#

We take reasonable technical measures for data of this (minimal) scale. If a personal data breach occurs that affects you and UU PDP requires notification, we will notify you and the relevant authority within 3 × 24 hours of our awareness of the breach, with the information the Law prescribes.

Children’s privacy#

The Site is not directed at children. We do not knowingly collect personal data from anyone under 18; where the Law requires parental consent for a minor’s data, that consent would be required before any collection. (Its subject matter also assumes an adult reader — AdSense requires publishers to be 18 or older.)

Occasional links to other websites exist in the posts. Those sites have their own privacy policies, which we do not control. Read them as you would anyone else’s mail.

Changes#

This policy may be updated when the Site changes — comments are now on; advertising will be the next likely trigger. The dates at the top move when it does.

Contact#

Questions, or exercising any right above: [email protected]