The short answer
Prospektor stores seven small things on the device you are reading this on, and every one of them is either signing you in or remembering a preference you set about your own screen. There is no advertising, no session recording, no fingerprinting and no third-party tracker: the studio's pages make no request to any other company at all, not even for typefaces, so nothing about your visit reaches anybody else.
Three things are counted, on Prospektor's own servers rather than on your device, and they are set out in What Prospektor counts about your use below. Until 24 August 2026 this page said "no analytics" without that paragraph, which was true of your browser and not true of the product. It is corrected here and in the panel itself, and the flat phrase "no analytics tool" is gone from both, because one of those three records is exactly the thing an analytics company would be hired to do. We do it ourselves, on our own servers, and say so.
That is why the notice you saw on your first visit had a Got it button rather than an Accept and a Reject. There is nothing optional to accept or reject yet, and a choice over nothing is worse than no question at all. The notice and the panel behind it read in your workspace's language (Workspace settings → Workspace → Language); the cookies' own names stay as your browser shows them.
Seeing the list yourself
Cookies in the footer of any page, or the address studio.prospektor.ai/#cookies, opens the full list: what each item is called, whether it is a cookie or browser storage, what it is for, and how long it stays. The code works from the same list, so it cannot drift out of date without a test failing.
| What | Kind | For | Kept |
|---|---|---|---|
pps_session | Cookie | Keeps you signed in, remembers which workspace you picked, and notes when you last saved something so the next screen reads your save and not an older copy | 12 hours |
pps_oauth_state | Cookie | Protects the Google sign-in round trip | 10 minutes |
pps_share | Cookie | Remembers which shared pitch sent you to sign in, so you land back on it | 10 minutes |
pps-theme | Local storage | This device's light/dark choice | Until you clear site data |
pps-library-sort | Local storage | How this device likes the library sorted | Until you clear site data |
pps-consent | Local storage | Your answer to the cookie notice, and when you gave it | 12 months |
pps-example-gone | Local storage | That you removed the example pitch from your library | Until you clear site data |
The three pps- preferences are stored on the device, not against your account: your colleagues are unaffected, and nobody, including us, can look up how you like the studio to appear.
What Prospektor counts about your use
None of these is a cookie and none involves another company. They are records kept on Prospektor's servers, and this page names them because a page titled what is kept about me that stopped at cookies would be answering an easier question than the one you asked. The same four are listed in the Cookies panel in the studio's footer, in the same words the code works from.
When you were last here
Per member, per workspace: your email address, when you first and last opened the studio here, when you last signed in, how many separate days you have been here, how many times you have signed in, and whether the last sign-in came through Google or an emailed link.
Not what you looked at. No page, no screen, no search, no pitch, no scroll and no dwell time; the record is written when you arrive and knows nothing about what you did next.
It is written on the studio's own start-up call, at most once an hour. It exists so a workspace nobody has opened in a month gets a conversation rather than an invoice. Only Prospektor's operator sees it, on the monitoring screen; not your colleagues, not the agency above you, and nowhere in the product. It is deleted with the workspace.
Nothing in the emails
The mail Prospektor sends you carries no open-tracking pixel and no rewritten links. Whether you opened it, and what you clicked in it, is not recorded anywhere (not by us and not by our mail provider) because the messages never ask for it. As of 30 August 2026 they carry no images at all.
Which screens get opened
Per workspace, per screen: how many times it was opened, on how many separate days, and the first and last of those days. Twenty-eight screen names and a number beside each; that is the whole record.
Not who. There is no address in it, no name and no session marker, so it cannot say who opened anything, only that somebody in this workspace did. Not when, beyond the day: no clock time is kept, so it cannot be reassembled into a session even in principle. Not in what order: it is a tally, not a trail. And never which pitch: a pitch you open is counted as "a pitch", never as that one. Nothing about a company, a search, a target or anything you typed goes anywhere near it.
It exists so that a screen nobody can find gets fixed instead of guessed at. Before this, the only way to know which parts of the studio people actually use was to ask them, and the honest way to ask (a consent banner for an analytics vendor) would have been answered by a small minority and would have sent your visit to another company. This sends it nowhere. Only Prospektor's operator sees it, as counts on the monitoring screen.
Your browser can switch this one off by itself. If it sends a Global Privacy Control signal (below), nothing is counted from it at all. That works here and not for the two records around it, for an honest reason: these counts are sent by the page you are reading, so a browser refusing to send them stops the counting for real, while a switch over something written on our servers would not stop anything. We would rather have a smaller number than a switch that lies.
How long an edit takes
When you fix a block of a deliverable and press Save & teach, the studio records how long that block was open before you saved it: the moment you pressed the pencil, the moment you pressed save, and the gap between them. Three fields on the run: when, which kind of deliverable, and the number of milliseconds.
Not what you wrote, and not who wrote it. The record carries no address of its own, nothing you typed, no keystrokes, no screen and no navigation. One duration per save, and nothing at all about the minutes between.
Not a number where there is no honest one. If the duration arrives unusable, or if it is longer than thirty minutes (a tab somebody walked away from is not half an hour of work) it is stored as no clock rather than rounded to something plausible. It is never stored as zero, which would claim the draft needed no fixing when what really happened is that nothing was measured.
It exists because of what this product is. Prospektor writes a first draft and expects you to fix it, so the only honest measure of whether a draft was any good is how long the fixing took, and it is the number that says whether a change we made to the studio actually helped or only felt like it did. It is read as a median across many runs; no single edit of yours decides anything. Only Prospektor's operator sees it. Not your colleagues, not the agency above you, not the person you shared a pitch with, and nowhere in the product.
Your browser can switch this one off by itself too. If it sends a Global Privacy Control signal (below), the studio does not send the duration at all; and your edit saves exactly as it would have. What a refusal drops is the measurement, never the work.
The life of this workspace
About the workspace rather than about you: when it was created, which door it came through, its plan, and the dates it was suspended, resumed or ended. No address, no company name, nothing anybody typed or produced.
Since 24 Aug it also holds which option was picked if the subscription was paused or cancelled from inside the studio. That question is multiple choice and has no text box anywhere, deliberately, so what is kept is one token from a fixed list, never a sentence. If you would rather say more, the email that may follow asks for a reply and you can ignore it.
This one deliberately outlives the workspace it describes; otherwise the question do customers stay? could only ever be asked of the customers who did. When a workspace is deleted the record is re-keyed to a one-way hash and marked erased, so the arithmetic survives without you surviving in it.
If you would rather we did not
All four run on legitimate interest rather than on consent, which is why there is no switch for them in the Cookies panel; a switch that has to say yes is worse than an honest sentence. What you have instead is the right to object, under Article 21 of the GDPR. (For Which screens get opened and How long an edit takes, a Global Privacy Control signal from your browser already is that objection, and is honoured without you writing to anyone; those two are the ones your own browser sends, so refusing genuinely stops them.)
Write to privacy@prospektor.ai. A person answers every one: either we stop counting you, or we tell you why we believe we may continue, and if you disagree with that answer you can take it to your supervisory authority. Nothing about your account changes while you wait, and objecting is never a reason for anything in the studio to work differently.
Changing your mind
Click Cookies in the footer. Whatever you chose, the same panel that set it will unset it, from any page, with no sign-in and no email to anyone. If you clear your browser's site data, the answer goes with it and you will be asked again on your next visit.
You will also be asked again if twelve months pass, or if we ever change what we store; an answer to one version of this notice is not treated as an answer to a different one.
If your browser says no on your behalf
Some browsers and extensions send a Global Privacy Control signal, which is a standing "do not sell or share my information". Prospektor reads that as a refusal of everything optional and records it that way without asking you again. You can still turn something on from the Cookies panel if you want to.
It does one more thing, added 24 August 2026: it stops Which screens get opened counting your visit at all, and since 25 August 2026 it also stops How long an edit takes being measured, while your edit saves exactly as it would have. Those two are the records your browser can switch off on its own, because they are the two your browser is the one sending. The other two are written on our servers, where a switch would stop nothing and saying otherwise would be a lie in the shape of a feature.
Why there is a panel at all if nothing is optional
Because of what comes next. The panel is the gate anything loaded into your browser would have to come through, and it is switched on before there is anything to gate rather than after. If Prospektor ever adds an analytics tool, three things happen at once and none of them is optional for us: it appears in that list with its name and its purpose, the notice turns into a real Accept and Reject with equal weight, and it does not load at all until you have said yes.
The three records above are the other kind of thing, and the panel now says so in the same breath rather than leaving them to a policy page. A gate is the right answer for something that would run in your browser; for something that runs on our servers under legitimate interest, the right answer is to name it and to make objecting easy.
Your phone number, and your passkeys
Two things we hold about you rather than about your work, both added 24 August 2026:
- A phone number, if you gave one, in Your account, or on a free run, where a mobile is asked for before we will email you the result. One number is held per person, and a number already on your account is never replaced by one typed on a free run. It is never sent to a model and never included in a pitch, a proposal or a shared link. One third party receives it, and only on a free run with the box left ticked: Sendblue, the texting service our product news by text is sent from, gets the number, your address and the domain you ran, as a contact, never as a message from us. Untick the box, clear the number, or withdraw the text permission below and that contact is deleted there too. What it may be used for is exactly what you have allowed: getting you back into your account and reaching you about the account itself, always; and product news by text only if that permission is granted, which is one of the four below and can be withdrawn at any time. On a free run that box starts ticked; unticking it means the number is not stored at all. Clear a stored number any time in Your account.
- Your passkeys, if you made any, and specifically only their public halves. The private key never leaves your device and we never see it. We keep no information about the make or model of your device, no IP address and no browser fingerprint: a passkey record is a public key, a coarse label like "This device", when it was made and when it was last used.
- Your contact permissions: which of product email, account texts, product texts and phone calls you have allowed, when you last changed each one, and whether you answered on the first card or in settings. Withdrawals are recorded the same way grants are, so there is always an answer to "what did I agree to, and when". Nothing is actually sent through any of these channels: Prospektor has no mailing list, no text-message provider and nobody making calls. If that ever changes, this page changes first.
The first two belong to your account rather than to a workspace, so deleting a workspace does not remove them. Removing a passkey in Your account does; so does asking us to erase your account data at privacy@prospektor.ai.
Share links
If someone sent you a Prospektor link and you are reading their work rather than using the studio, the same is true of that page: strictly necessary cookies only, no third-party requests, and the same Cookies link in its footer. The person who shared it can see that the link was opened; what they see, and what the sender's workspace knows about you, is set out in the privacy policy.