Privacy Policy

Overview

PinsPad is a personal URL pin collection service. We collect only the data needed to run your account, store your pins, and (if you use it) connect the Chrome extension to your PinsPad instance. We do not sell your data or use it for advertising.

Account data

When you register with email, we store:

• Email address (sign-in and account identity)
• Display name
• Password as a secure hash (we never store your password in plain text)
• Optional preferences (for example pin sort and density)

If you sign in with Google, Google authenticates you and shares your verified email address and profile name with PinsPad. We store that email, a Google account identifier, and the display name you choose for your dashboard. We do not receive or store your Google password.

If you create an API token for the Chrome extension, we store a hashed copy of that token on the server. The raw token is shown once at creation time; you keep it in the extension settings.

Pins and categories

Pins you save may include:

• URL and title
• Optional note
• Category assignment
• Visit counts used for sorting
• A thumbnail image fetched from the page (when available)

When you add a pin from the web app, PinsPad may request the page from our servers to read public metadata (title, description, Open Graph / Twitter image) and generate a thumbnail. That fetch happens to serve your pin collection; we do not use it to build a browsing profile of sites you never saved.

Chrome extension

The PinsPad Chrome extension:

• Can sign in with Google (via chrome.identity) or store an API token locally via chrome.storage.sync so it can call the PinsPad API at pinspad.com.
• Google sign-in uses the same OAuth account matching as the website (verified email and profile name); the server issues an API token bound to this browser install.
• Uses activeTab only when you open the popup, to read the active tab’s title and URL for the save form.
• Sends title, URL, optional note, and category to your configured PinsPad server when you click Save. It does not read full page content, keystrokes, or your full browsing history.

Sharing and third parties

We do not sell or rent your personal data. We do not transfer user data for purposes unrelated to providing PinsPad, and we do not use it to determine creditworthiness or for lending.

Pins and account data stay on the PinsPad server that hosts your account. Hosting, database, and infrastructure providers that operate that server may process data only as needed to keep the service running.

Cookies and similar technologies

The PinsPad website uses a small number of cookies and browser storage entries. When you first visit, a banner lets you accept or reject optional analytics cookies.

Essential (always used)

• Session cookie (PINSPADSESSID) — keeps you signed in, protects forms with CSRF tokens, and secures your account. This cookie is required for the service to work; rejecting analytics does not disable it.

Analytics (only with your consent)

If you click Accept on the cookie banner, we load Google Analytics (Google tag / gtag.js) to collect anonymous usage statistics (for example which pages are visited). Google may set its own cookies according to Google’s privacy policy. If you click Reject, Google Analytics is not loaded.

Your choice

Your preference is stored in your browser’s localStorage under the key pinspad_cookie_consent (essential or analytics). To see the banner again, clear site data for pinspad.com in your browser settings. The Chrome extension uses chrome.storage instead of website cookies; see the Extension section above.

Retention and deletion

We keep your account and pin data while your account exists. You can delete individual pins and categories in the app. If you need your whole account removed, contact us using the details below.

Contact

Questions about this policy or your data: privacy@pinspad.com