Privacy Policy
Last updated: August 7, 2026
Who We Are (Data Controller)
Presidentializer.com is a satirical web application that transforms text using capitalization patterns derived from publicly available social media posts. The site is operated by, and the data controller for the processing described here is:
Truly Random, LLC
[POSTAL ADDRESS: street, city, state, ZIP]
United States
privacy@trulyrandom.co
We are not affiliated with, endorsed by, or associated with Donald J. Trump, the Trump Organization, Trump Media & Technology Group, Truth Social, any political party, campaign, or government body.
EU / UK representative. [If the site is offered to users in the EEA or UK, name your Article 27 GDPR representative here, with a postal address and contact email. Leave this paragraph in place only once a representative is appointed. See the compliance notes in the repository.]
Data We Collect
Account & Email
If you create an account we collect your email address. Accounts use passwordless email sign-in (no password is stored) and are hosted by Supabase. We use your email to authenticate you and to send you service messages about your account, credits and purchases.
If you use the AI-powered nickname feature, we also store your credit balance and a transaction ledger (grants, purchases and usage, each tied to your account) so we can track your balance and answer billing questions.
Waitlist & Marketing Email
If you submit your email to the launch waitlist, we store that address with our email service provider, Kit (formerly ConvertKit), together with basic attribution data about how you arrived at the site (referral source, medium, campaign and the page the form was on) and the date of your sign-up. We use it to email you about the launch and occasional product news. Every email includes an unsubscribe link, and you can also ask us to remove you at any time.
Payment Data
Payments are processed by Stripe. We never receive or store raw card numbers or payment credentials. We do receive and store a Stripe checkout session identifier, the pack purchased, the amount, and the email address you gave Stripe, so that we can credit your account and handle billing enquiries. Stripe also collects billing and location data it needs to calculate sales tax and VAT.
Text You Enter
Text submitted to the converter is processed transiently to generate output. We do not store or log your input text beyond the duration of a single request, and it is not used to train or retrain our models. When the AI nickname feature is enabled, your text is sent to the Anthropic API for that request only; Anthropic does not use API inputs to train its models.
Technical & Security Data
To protect the service from abuse we process your IP address in memory to apply rate limits. When a request trips a limit or another abuse signal, we record an event containing the event type, a severity, a timestamp, a salted one-way hash of your IP address (never the address itself) and, where you are signed in, your account identifier. Our error-monitoring provider, Sentry, receives technical diagnostics when something breaks; it is configured not to attach request bodies, cookies, headers or IP addresses.
Sign-in and checkout are protected by Cloudflare Turnstile, which processes technical signals from your browser to distinguish humans from bots.
Analytics & Performance
With your consent, we use Google Analytics (page views, sessions, and how the converter is used) and Vercel Speed Insights (Core Web Vitals only). Speed Insights is not loaded until you accept analytics cookies. Google Analytics runs under Google Consent Mode: it sets no cookies and reads no identifiers unless you accept, though anonymous cookieless signals may be sent beforehand. We never send the text you type into the converter to any analytics service. See our Cookie Policy for details.
Legal Bases for Processing (UK/EU GDPR)
- Performance of a contract (Art. 6(1)(b)): creating and authenticating your account, issuing and spending credits, processing purchases and providing support.
- Consent (Art. 6(1)(a)): analytics and performance cookies, and waitlist/marketing email. You may withdraw consent at any time; withdrawal does not affect processing carried out before you withdrew.
- Legitimate interests (Art. 6(1)(f)): rate limiting, abuse and fraud prevention, security event logging, and error monitoring. Our interest is keeping the service available and preventing abuse; we minimise this data (for example by hashing IP addresses) so the impact on you is limited.
- Legal obligation (Art. 6(1)(c)): retaining transaction records for tax and accounting purposes.
Who We Share Data With
We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We do use the following service providers, who process data on our behalf under contract:
- Vercel: website and API hosting, and Speed Insights (consent-based). Privacy Policy
- Supabase: account authentication and application database. Privacy Policy
- Stripe: payment processing and tax calculation. Privacy Policy
- Kit (ConvertKit): waitlist and marketing email delivery. Privacy Policy
- Anthropic: AI nickname generation, when that feature is used. Privacy Policy
- Google Cloud: the capitalization inference service. Privacy Notice
- Cloudflare: Turnstile bot protection and model/asset storage (R2). Privacy Policy
- Upstash: rate-limit counters keyed to hashed request data. Privacy Policy
- Sentry: error monitoring. Privacy Policy
- Google Analytics: site analytics; cookies and identifiers only with your consent. Privacy Policy
We may also disclose data where required by law, to enforce our Terms of Service, or in connection with a merger or sale of assets (in which case we will notify you).
International Transfers
We are based in the United States and all of the providers listed above process data in the United States and, in some cases, other countries. If you are in the EEA, UK or Switzerland, this means your personal data is transferred outside your home jurisdiction. Those transfers rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), or on the EU-US / UK-US Data Privacy Framework where the recipient is certified. You can request a copy of the relevant safeguards by emailing us.
Data Retention
- Account records (email, credit balance, credit ledger): kept while your account is open, and deleted when you delete your account.
- Transaction and tax records: retained for 7 years as required by tax law, in a form that is no longer linked to an active account. This retention survives an account deletion request, as GDPR Art. 17(3)(b) permits.
- Waitlist / marketing email: kept until you unsubscribe or ask us to delete it.
- Security events (hashed IP, event type, timestamp): automatically deleted after 90 days. These records survive an account deletion because they are needed to establish and defend legal claims (Art. 17(3)(e)); they contain no directly identifying data.
- Privacy request records: the email address is erased as soon as the request is completed or the confirmation link expires; an anonymised audit record of the request is kept for up to 3 years.
- Converter input text: not retained.
- Analytics: retained per the respective service's retention settings (Google Analytics is configured to the shortest available retention period).
Your Rights
Depending on where you live, you may have the right to access, correct, delete, or port your data; to object to or restrict processing; and to withdraw consent. You can submit an access or deletion request yourself at Your Privacy Rights, and we will email you a confirmation link before acting on it. You can also email privacy@trulyrandom.co.
We respond within 30 days (one month). We do not charge for these requests and we do not discriminate against you for making one.
Complaints. If you are in the EEA or UK and you think we have handled your data improperly, you have the right to lodge a complaint with your local data protection supervisory authority (in the UK, the Information Commissioner's Office). We would appreciate the chance to address it first.
US State Privacy Rights
If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon or another state with a comprehensive privacy law, you have rights to know, access, delete, correct and port your personal information, and to opt out of sale, sharing and targeted advertising. We do not sell or share personal information, and we do not use it for targeted advertising or profiling that produces legal or similarly significant effects. In the 12 months preceding the date of this policy we disclosed personal information only to the service providers listed above, for the business purposes described. You may exercise your rights using the same request form, and you may appeal a denied request by replying to our decision email.
Security
We use TLS in transit, hold secrets outside the browser bundle, hash IP addresses before storing them, gate abusive traffic with rate limits and bot protection, and restrict database access with row-level security. No system is perfectly secure. If a breach affects your personal data and poses a risk to you, we will notify you and the relevant supervisory authority as required by law.
Children
This service is not directed at, and may not be used by, children. You must be at least 16 years old to use the service, or at least 13 where you are in the United States or in an EEA member state that has set a lower digital consent age. We do not knowingly collect personal data from children below the applicable age. If you believe we have, contact us at privacy@trulyrandom.co and we will delete it.
Automated Decision-Making
We do not make decisions producing legal or similarly significant effects about you by automated means. The machine learning models described in our AI Disclosure operate on the text you submit, not on you as a person.
Changes to This Policy
We will post updates here with a revised date. For material changes affecting how we use your data, we will give notice on the site (and by email where we hold your address) before the change takes effect.