Phrasit

The short version

The text you paste into client-side tools (word counter, case converter, reading-level analyzer, text comparator) never leaves your browser. The AI tools (paraphraser, grammar checker, summarizer, tone changer, translator, AI humanizer, AI detector, chat, and the writing helpers) send your text to our AI provider, DeepSeek, to generate the result and return it. The citation generator sends only the URL, DOI, or ISBN you paste, never the text of your own writing. You do not need an account, and you never have to give us your name, email, or any other personal detail to use a tool.

How the AI tools handle your text

The AI tools run server-side. When you run one, the text you submit is sent over an encrypted connection to the API of DeepSeek, an AI company based in China, processed for that request, and the result is streamed back to you. The text is used only to produce your result. DeepSeek handles it under its own terms and privacy policy, which you can read on deepseek.com, and it may be processed on servers outside the UK and the EU, including in China.

Phrasit does not store the text of your AI requests. We keep no copy of your input or the generated output on our servers once the response is returned, and there is no account, so nothing is tied to an identity. Each AI tool has a free daily allowance per visitor, so we count requests against a hashed form of your IP address. Those counters hold no text, live only in memory, and clear within 24 hours. If the AI service is busy or you reach the grammar checker’s daily allowance, the grammar checker sends your text to LanguageTool instead.

Because the AI tools send text to a third party, do not paste anything you are not comfortable sharing for processing, such as secrets, passwords, or confidential personal data about other people. The tools that run entirely in your browser, listed above, never send your text anywhere.

Who is responsible for your data

Phrasit is run by Vikas D., a software engineer in London, United Kingdom, who is the data controller for this site. For anything about your data, email privacy@phrasit.com.

Analytics

We use Google Analytics 4 (provided by Google LLC) and Microsoft Clarity (provided by Microsoft Corporation) to understand how people use the site: which pages and tools are visited, how people arrive, what device and browser they use, their approximate country, and, in Clarity, anonymised recordings of clicks, scrolling and page layout so we can find broken or confusing screens. Clarity is set to mask the content of every page, so the text you type into the tools and the results are hidden from recordings, and neither service receives the text you paste or the AI results.

Both run in a consent mode. Until you choose Accept all, or switch on Analytics under Customise, they set no cookies: Google Analytics sends cookieless signals that Google turns into anonymised, modelled totals, and Clarity treats every page view as a separate anonymous visit. If you accept, both may set cookies such as _ga, _clck and _clsk so that visits can be joined into sessions. You can withdraw that consent at any time from Cookie settings in the footer.

We also record anonymous tool-use events, such as a tool name and the action taken, so that we know which tools are useful and which need improvement. These events never include the text you typed.

When you sign up for our newsletter, we collect your email address and send it to Kit (formerly ConvertKit) to manage subscriptions. You can unsubscribe at any time using the link in any newsletter email.

When you save citations to the bibliography, they are stored in your browser’s local storage. They never reach our servers.

Cookies and similar storage

Essential storage is always on: your theme preference (light, dark, or system) and your cookie choice, kept in your browser so the banner does not ask on every visit. Your cookie choice is kept for 12 months, after which we ask again.

Analytics cookies (Google Analytics and Microsoft Clarity) and advertising cookies (Google AdSense) are optional and are only set after you allow them in the cookie banner. The banner offers Reject all, Customise and Accept all, and Reject all is as easy as Accept all. The embeddable widgets that other sites can place on their pages load no analytics and show no banner.

Legal basis

Under UK GDPR and the EU GDPR we rely on your consent for analytics and advertising cookies. We rely on our legitimate interests for cookieless visit counts, for security and server logs, for the daily AI allowance counters, and for answering email you send us. You can object to processing based on legitimate interests by emailing us.

Who receives data and where

Analytics data goes to Google LLC and Microsoft Corporation, advertising data (only with your consent) goes to Google, and the text you send to an AI tool goes to DeepSeek as described above. Google and Microsoft may process data in the United States. Both are certified under the EU-U.S. Data Privacy Framework and its UK extension, which is the safeguard for those transfers.

How long we keep it

Google Analytics keeps event data for up to 14 months. Microsoft Clarity keeps session recordings for 30 days and heatmap and click data for 9 months. Server logs are kept for up to 90 days. The AI allowance counters clear within 24 hours.

Advertising

Pages outside of the tools (the home page, guides, legal pages) may show display ads from Google AdSense. Google and other third-party vendors use cookies to serve ads based on your prior visits to this site and other websites. Google may use the Google advertising cookie, sometimes referred to as the DoubleClick cookie, to help serve and measure ads.

You can control personalised advertising in Google Ads Settings. You can also learn about broader interest-based advertising opt-outs at aboutads.info. Opt-out tools are managed by third parties and may depend on your browser, device, and cookie settings.

Your rights

You can request access to or deletion of any data we hold by emailing privacy@phrasit.com. Under GDPR and UK GDPR, you may also ask us to correct, restrict, export, or stop processing personal data where those rights apply, and you can withdraw consent at any time from Cookie settings in the footer. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk or to the data protection authority where you live.

If you are a California resident, the CCPA may give you the right to know what personal information is collected, request deletion, request correction, and opt out of sale or sharing for cross-context behavioural advertising. We do not sell the text you paste into tools. Advertising cookies are controlled by the consent banner and the third-party opt-out links above.

Changes

If we change this policy in a material way, we will update the date at the top and announce the change on the changelog.