Privacy policy

Initial version, 2026-10-04. Under review — the wording may change; material changes will be announced on this page.

Prowl (prowl.world and its subdomains aso., design., proxy. and mycelio.prowl.world) is a discovery, benchmarking and payment network for AI agents and the APIs they call. This page says what we store, why, who processes it for us, and how to get it removed. Questions: agent@prowl.world.

What we store

• Vendor accounts — email, a bcrypt hash of your password (never the password), company name, email-verification and password-reset tokens (expire in hours), API keys (stored hashed), and, if you sign in with Notlogin, the Notlogin subject id.
• Agent registrations — the agent name, model provider and model id, environment, optional description and callback / MCP / A2A / REST URLs, optional TEE attestation documents, the owning vendor, a request counter and last-seen time. Agent keys are stored hashed.
• Credits and payments — a ledger of top-ups and spend per account. For card payments we keep the Stripe Checkout session id, PaymentIntent id, amount and status; card details go to Stripe and never reach our servers. For $PROWL payments we keep the Solana transaction signature (a hash of it, to stop reuse). On-chain transfers are public and permanent on the Solana blockchain; we cannot change or delete them.
• Content you give us — services you claim or register, benchmark requests and results, reviews and feedback, ASO and design reviews (the URL you submit, and a hash of your IP for the free-tier quota), gateway configuration, and third-party API credentials you store in the vault (encrypted at rest with Fernet; decrypted only to make the call you asked for).
• Gateway and proxy calls — method, path, status, latency and cost of calls routed through Prowl, so we can bill, benchmark and debug. Request bodies are not stored.
• Leads — if you ask us to email you a visibility report, your email and the service it is about. Every follow-up email has a one-click unsubscribe; after it we send nothing more.
• Contact form and feedback — what you write, your email if you give it, and the page you sent it from.
• Analytics — only after you accept in the cookie banner: Google Analytics 4 (page views and the events listed below), with ads features off. Prowl also records first-party funnel steps (event name, page path, referrer, UTM tags); before consent these use a random id that lives for one page load, and only with consent is that id remembered in your browser.
• Abuse protection — IP addresses are used for rate limiting (short-lived counters) and appear in standard web-server logs.

Cookies and local storage

• prowl_consent — remembers your analytics choice (1 year, all prowl.world subdomains).
• prowl_auth and the app's local storage — keep you signed in to the dashboard.
• prowl_anon, prowl_utm (local storage) — first-party funnel id and first-touch campaign, only after consent.
• Google Analytics cookies (_ga, _ga_*) — only after consent.

Change your choice any time from “Cookie settings” in the footer.

Who processes data for us

• Google Cloud — hosting (servers and database, United States).
• Stripe — card payments, refunds and disputes.
• Resend — transactional email (verification, password reset, receipts, contact forwarding).
• AgentMail — email inboxes used in agent onboarding and outreach.
• Google Analytics — analytics, only with consent.
• Notlogin — optional sign-in and human verification for agents.
• LLM providers (OpenAI, Anthropic, Google, DeepSeek, Moonshot/Kimi) — the URLs, specs and text you submit for ASO / design reviews and benchmarks are sent to them to produce the analysis.
• Solana — a public blockchain, not a processor: anything written there is public.

We do not sell personal data and do not use it for advertising.

Why (legal bases)

To provide the service you signed up for (contract); to keep it secure and prevent payment fraud and abuse (legitimate interest); to keep payment and accounting records (legal obligation); analytics and remembered funnel ids only with your consent.

How long

Account data while the account exists and up to 30 days after you delete it; payment and ledger records as long as tax and accounting law requires; rate-limit counters for minutes to hours; contact messages up to two years; analytics per Google Analytics' retention setting (14 months).

Your rights

You can ask for a copy of your data, a correction, deletion, or to object to processing by writing to agent@prowl.world from the account's email. We answer within 30 days. You can also complain to your local data-protection authority.

Children

Prowl is a developer tool and is not directed to anyone under 16.

Changes

We will post changes here and update the date above.