The short version
Sharpen keeps what you log about your AI use and what you put on your profile, so it can score it, report on it and — if you choose — show it. It never captures anything you type into an AI tool. There is no advertising, no third-party analytics, no tracking pixel, and nothing is sold or shared for marketing. Rendering a page makes no request to anyone but this site; even the fonts are served from here. You can download everything and delete your account yourself, at any time, from Settings.
Who runs it
Sharpen is built and operated by one person, Bhushan Arun Ladde, as an open-source project. Questions, corrections and requests go through the contact form; a person reads every message.
What is stored
- Your account
- Email address, a password stored only as a bcrypt hash (none at all if you signed up with Google, GitHub or LinkedIn and have not set one), your name (first, middle, last — or a company name), a handle for your profile address, the account type, and an API key for the extension and scripts.
- Google, GitHub or LinkedIn, if you sign in with them
- The provider's permanent id for your account, and the email address and username it showed when you connected it — enough to recognise you next time and to show you which account is connected. See below.
- Your profile, if you fill it in
- Headline, job title, industry, years of experience, location, other tools you use, and a picture. Pictures are cropped and re-encoded on upload, which drops camera and location metadata.
- Your sessions
- For each AI session you log or import: date, work or personal, tool, kind of task, minutes, number of prompts, token counts if a provider export supplied them, and your four answers (how much of the work was yours, whether you checked the output, whether you learned something, how it turned out), plus an optional note. Monthly reports are built from these.
- Invitations you send
- If you ask Sharpen to email an invitation for you, it keeps who asked, when, a one-way hash (SHA-256) of the friend's address and the secret in the unsubscribe link — enough to never write to that address twice and to notice when they join, not enough to read the address back; the address itself is in no table and no log. If the friend clicks Stop any further invitations, the hash goes on a list Sharpen checks before every send. Accounts created from your personal link record that you invited them. Invitations you send from your own mail app or the share buttons involve Sharpen not at all.
- Notifications
- Short in-app messages about your own account — a welcome, a friend who joined from your link, a monthly report that is ready — with the time and whether you have opened them. They are shown only to you, never emailed or pushed, and are deleted with the account.
- Messages you send
- The contact form keeps your message, an optional rating, an optional email address for a reply, and the page you wrote from.
- Page views
- Counted on the server, without a cookie or a script: the page, the referring site's name, your browser's first language, whether you were signed in, and the country your network address belongs to — looked up on this server in a downloaded list, so no one else is asked. To count a day's visitors, the server keeps a one-way hash of that day, your address and your browser type, salted with a secret that is never written down; your address itself is not stored (only the two-letter country), and the hash cannot be matched to a different day or back to you. Bots are not counted.
What is never collected
Anything you type into ChatGPT, Claude, Gemini, Copilot, Perplexity or any other AI tool — not by the site, not by the extension. No browsing history beyond the opt-in import described below. No contacts, no device location, no microphone or camera (the site's headers forbid those outright), no payment details (Sharpen is free). Sharpen sends no email — no newsletter, no marketing.
What other people can see
Your public profile — off until you switch it on in Settings (accounts made before 12 October 2026 keep the setting they had), and off again in one click — shows your name, picture, headline, job title, industry, location and experience; your AI score, its parts and its flags; a month-by-month trend of sessions and work/personal split; and the tools you use. It never shows your email, your notes, or individual sessions. A public profile appears in the directory, in search engines, in the candidate view for company accounts, and through your score badge. Switch it off and all four stop at once: your profile address shows only "no public profile here", the badge stops loading, it drops out of the directory and the sitemap, and companies no longer see you. The profile says that the score comes from your own ratings and that Sharpen does not check them.
The 60-second check at /check stores nothing: your nine answers are written into the result's address and nowhere else, so only people you give that link to can see the result, and it says nothing about who you are. Opening it is counted like any page view.
Site totals on the home page — visits, pages viewed and how many countries visitors came from — are counts over everyone and say nothing about any one visit.
Community insights on /insights add up everyone's rated sessions over the last 90 days, public profile or not. They are aggregates only: nothing is shown until 10 people are in the numbers, a tool gets its own line only once 3 people have used it, and no figure is about one person.
Company accounts see public individual profiles and nothing else — no email, no private profile, no individual sessions.
Signing in with Google, GitHub or LinkedIn
If you choose Continue with Google, GitHub or LinkedIn, the provider asks you first, then tells Sharpen your account's permanent id, your name and your verified email address (GitHub: your primary verified address, which may be one you keep private on your profile). Google and LinkedIn also send the address of your profile photo; Sharpen does not save it, show it or load it. Sharpen asks for nothing else — no contacts, no connections, no work history, no repositories, no calendar, no posting rights — and never posts anything to those accounts. It uses the name and email to create your account the first time, and the id to recognise you afterwards; it does not keep the provider's access token once you are signed in. The provider sees that you signed in to Sharpen, under its own privacy policy.
A new account is made this way only when no Sharpen account already uses that email — an existing account is never joined to a Google, GitHub or LinkedIn account automatically. To add one to your account, sign in and use Settings → Sign-in methods → Connect; Disconnect removes it, as long as another way in remains.
Invitations
A member can invite a friend. By default the invitation goes from the member's own mail app or a share button and Sharpen only supplies the words and the member's link. Where the site can send email, the member can instead ask Sharpen to send it: one email, in the member's name, from Sharpen's address, with a one-click unsubscribe link and no follow-up. Sharpen sends at most ten a day for one member, never twice to the same address, never to an address that already has an account or that asked not to be written to, and never discloses the member's own address. What is kept is described under What is stored.
The browser extension
The optional Chrome extension watches a fixed list of AI sites and records, per day and tool, the minutes you spent and how many prompts you sent — counted by noticing the send action, never by reading the text. It keeps those records, your portal address and your API key in the browser's own extension storage, and posts the totals to your account once a day or when you press Sync now.
Its Before you installed Sharpen import is opt-in: the browser asks for history access only when you press Preview, the extension reads visit times for the same AI sites in the 90 days before installation and nothing else, shows you every row before anything is sent, and gives the permission back as soon as it is done. No address, page title or search ever leaves your browser.
Where it lives, and who else is involved
The site and its database run on one server rented from Oracle Cloud in Ashburn, Virginia, USA; connections are encrypted (HTTPS, with HSTS). The domain's DNS is hosted by Cloudflare, which answers "where is sharpenscore.com" but does not carry the site's traffic. Google, GitHub and LinkedIn are involved only if you sign in with them, as described above. Countries come from DB-IP's free country list (IP Geolocation by DB-IP), which the server downloads once a month; DB-IP sees that download and nothing about visitors. Invitation emails, where the site has them switched on, are delivered by Resend, which sees the friend's address, the subject and the inviter's name for as long as its delivery log keeps them; nothing else ever goes to an email provider. The server also hosts BotSpotter, the author's counter of AI crawlers: the proxy in front of Sharpen hands it the requests made by crawlers and bots (address, user agent, header names, path — no cookies, no header values); a request from a browser is discarded before it leaves this server, so nothing about a human visitor goes to it. Nothing is shared with anyone else: no data brokers, no advertisers, no AI providers — Sharpen does not send your sessions to any AI model. The data would be disclosed only if the law required it.
How long it is kept
Your data stays until you delete it. Deleting a session removes it at once. Deleting your account — Settings, at the bottom, with your password (or your handle, if you have no password) — removes the account, every session, every report, your picture and any connected Google, GitHub or LinkedIn sign-in in one step, with no 30-day grace period; your profile address shows "no public profile here" from the next request, and community insights forget you immediately. Messages you sent through the contact form are kept as the site's record, with the link to your account removed. Database backups, which exist so that a failed disk does not lose everyone's data, are kept for no more than 14 days, so a deleted account is gone from every copy within 14 days. The server's technical log records errors and events such as "account deleted" with the handle; it does not record pages visited or addresses.
Your choices and rights
See and correct everything in Settings and on Sessions. Take it with you: Settings → Your data gives your sessions as a CSV (the same format the importer reads) and your whole account as JSON. Delete: Settings → Delete account. Hide: switch off the public profile. None of these needs an email to anyone. If you live somewhere that gives you further rights — for example California (CCPA/CPRA) or the EU and UK (GDPR) — Sharpen honours them: it does not sell or share personal information as those laws define it, and any other request (to know, to restrict, to object) can be made through the contact form and is answered within 30 days.
Children
Sharpen is a tool for working adults and is not directed at children under 16. An account found to belong to a child is deleted.
Changes
If what Sharpen stores or shows changes, this page changes first, with a new effective date, and every revision is public in the project's Git history.