Privacy policy
Last updated: 15 November 2026
Who we are. CueBlu is an independent product based in Sweden and is responsible for the data described here. Contact: hello@cueblu.com.
What this covers. This policy covers the CueBlu beta app, where you turn an idea or a prompt into a build-ready prompt. The CueBlu waitlist has its own privacy policy.
What we collect and why
- Your account: your email address and, if you choose one, a username. We use them to log you in and to keep your prompts. Legal basis: our agreement with you (GDPR article 6(1)(b)).
- Your ideas and prompts: what you type or paste, the experience level you pick, the questions and choices CueBlu writes for you, your answers, the choices you change, your note, the finished prompt and the dates. We use them to write your prompt and to keep it in My prompts. Legal basis: our agreement with you. Please don't include other people's personal data.
- Login codes: when you log in, we email you a 6-digit code. The email contains the code and no links.
- News emails (optional): if you tick "Email me when paid plans launch and about CueBlu news" when you create your account, or switch it on in Settings, we save that choice with the date you gave it. We may then email you when paid plans launch and with other news about CueBlu. Legal basis: your consent (GDPR article 6(1)(a)). The box is never ticked for you and isn't needed for an account. You can turn these emails off at any time in Settings or with the unsubscribe link in each of them; we then save the date you turned them off. Turning them off doesn't affect your account or your prompts.
- Before you log in: an idea you start without an account is linked to your browser by a random code kept in your browser. We store only a scrambled (hashed) version of that code. If you never log in, the idea is deleted 24 hours after it last changed.
- Your country: Cloudflare tells us which country a visit comes from. We use it only to suggest a sensible region and currency in the questions. It is sent to the AI as a country name and is never stored.
- Protection against abuse: to limit how many ideas can be started before logging in and how many login codes can be requested or tried, we keep a count next to a scrambled version of your IP address (made with a key that changes every day) and of your email address. These records are deleted after 2 days. Legal basis: our legitimate interest in keeping CueBlu safe and affordable (GDPR article 6(1)(f)).
- Anonymous counts: per day, how many ideas were started, how many reached each step, how many accounts were created and how many prompts were delivered and copied, and how many visits and started ideas came through each link source (the utm_source word in a link, such as the name of a social network). These are only numbers, with no user ids, IP addresses or other personal data. When a step fails, we log which step, the type of error and the time, without your text or email.
We don't use cookies, analytics, trackers or ads, and the app loads nothing from other websites. We never sell your data.
What your browser keeps
The app keeps a few things in your browser's local storage: your login session, the random code for an idea you started before logging in, the text you typed on the start screen, and a note if you skipped choosing a username. For the current browser tab only, it also remembers the link source you arrived through, so a started idea can be counted with it. They are needed for the features you use, so there is no consent banner. Logging out removes your session; clearing your browser's site data removes everything.
Who helps us
- Supabase stores your account, ideas and prompts and handles logging in, on servers in the EU (Stockholm).
- Cloudflare hosts the app and passes on every request, so it processes your IP address to deliver the site. Cloudflare is based in the USA; data sent to it is protected by the EU-U.S. Data Privacy Framework and the EU's standard contractual clauses.
- Resend sends the login code emails, and the news emails if you chose to get them. It stores each email (your address, the subject and the content) and its delivery log in the USA for 30 days. Data sent to Resend is protected by the EU's standard contractual clauses and the EU-U.S. Data Privacy Framework.
- Anthropic provides the AI that reads your idea, writes the questions and writes and checks your prompt. It receives your idea or pasted prompt, your answers and choices, your note and your country name, never your email address or username. Our agreement is with Anthropic Ireland Limited; the processing takes place in the USA and possibly other countries outside the EU, protected by the EU's standard contractual clauses. Anthropic does not use this data to train its models. It deletes it within 30 days, except content its systems flag for breaking its usage policy, which it may keep for up to 2 years.
How long we keep your data
- Ideas not linked to an account: 24 hours after they last changed.
- Your account, ideas and prompts: until you delete them. You can delete a single prompt in My prompts, or your whole account in Settings. Deleting is permanent.
- Your choice about news emails, with the date you gave it (and the date you turned it off, if you did): until you delete your account.
- Scrambled IP addresses and email addresses used against abuse: 2 days.
- Login code emails at Resend: 30 days. Data at Anthropic: up to 30 days, as described above.
- Anonymous counts and the error log contain no personal data and are kept to improve CueBlu.
Your rights
You can see and download everything linked to your account with Download my data in Settings, and delete single prompts or your whole account yourself. You can also ask us to correct your data (changing the email address isn't possible in the app during the beta), to restrict how we use it or to stop using it, by emailing hello@cueblu.com. You can complain to Sweden's data protection authority, IMY (imy.se).
Changes
If this policy changes, we update the date at the top. We tell logged-in users about important changes in the app.