Privacy

When you paste a prompt and click Analyze, all pattern detection happens in your browser. The text is not sent to any server — not ours, not third parties. You can disconnect from the internet after loading the page and the analysis continues to work.

The shareable link uses a base64 hash of the prompt in the URL. This hash is visible in your browser's address bar but is not transmitted to the server in normal GET requests (hashes, by HTTP design, stay on the client). The link produced by the "Share" button has the format <code>/share?s=…&e=…&w=…&i=…#&lt;hash&gt;</code> — the query params only carry aggregate statistics (score and severity counts) to render the social preview (OpenGraph). The prompt text stays exclusively in the fragment (<code>#</code>) and never reaches the server.

When you click Rewrite with AI, the correction instruction text is sent to our /api/rewrite endpoint and from there to one of the free partner AIs (Gemini, Mistral Small, or Llama 3.3 via Groq). The provider is selected automatically, prioritizing whoever has available quota.

Your prompt text is never stored — not the original, not the correction instruction, not the rewritten result. The request passes through server memory, is answered, and the content is discarded. Whet only records anonymous numerical performance metrics (scoreBefore, scoreAfter, delta, elapsedMs) to feed the ranking at /whet-benchmark — these numbers do not identify any person and cannot be used to reconstruct the prompt.

Providers have their own storage policies:

• Google Gemini (free tier) — the current AI Studio policy allows inputs and outputs to be used for model improvement. Avoid using automatic rewriting for sensitive prompts.
• Mistral (free tier) — "Experiment" tier; see mistral.ai/terms.
• Groq (Llama 3.3 70B) — see groq.com/privacy-policy.

Automatic rewriting is optional. To avoid sending text to third parties, expand "View correction instruction" in the rewrite panel, copy it, and paste into your AI of choice — including local models.

To prevent abuse of free tiers, there is a rewrite limit per IP per hour. The IP address is temporarily held in server memory during that window — it is not written to any database and is automatically discarded after the period. Once the limit is reached, the panel shows the correction instruction for use in the classic flow.

Prompts above 4,000 characters are rejected by the rewrite route. Local analysis has no such limit.

• Whet uses Vercel Analytics — aggregated page views, cookieless, no individual tracking. See vercel.com/docs/analytics/privacy-policy.
• We have no user database. We do not store prompts, rewrites, diagnostics, or any content you enter.
• We do not use tracking cookies, track individual users, or share data with ad networks.
• We do not require signup, login, or any identification.

When using automatic rewriting, text is processed by servers outside Brazil:

• Google Gemini — Google LLC, United States and/or European Union.
• Mistral AI — French company, European Union.
• Groq — Groq, Inc., United States.

Each provider operates under its own policy (listed in Section 2). To avoid international transfers, use the classic flow with a local or self-hosted AI.

Questions about this policy or about how your data is handled:hello@trywhet.com