Privacy Policy

1. Summary

• Pin analysis runs entirely on your device.
• The licence service receives only the pseudonymous identifiers needed to run a 14-day trial and to activate a purchased licence on up to three devices.
• We do not sell or rent personal data, and we run no advertising trackers.
• We do not collect your name, email address, browsing history, keystrokes, or the content of any site other than the public Pinterest pin metadata you choose to analyse.

2. Who is responsible

The controller for the processing described here is [COMPANY_LEGAL_NAME], [COMPANY_ADDRESS]. You can reach us at [SUPPORT_EMAIL].

PinWasp is an independent product. It is not affiliated with, endorsed by, or operated by Pinterest, Inc.

3. Data the extension handles

Public Pinterest pin metadata

While you browse Pinterest with PinWasp active, the extension reads publicly available information about the pins already shown to you — saves, repins, comments, reactions, shares, board name, creator username, media URLs, creation date, and whether a pin is promoted or AI-generated. This is the same information Pinterest already serves to your browser. It is stored in your browser's IndexedDB and is never transmitted to us.

Preferences and licence state

Your settings (which metrics to show, dark theme, slider, hidden ads, and so on) and your licence key are stored with Chrome's extension storage. Settings may sync between your own Chrome profiles if you have Chrome Sync enabled — that transfer is performed by Google under its own policy, not by us.

Error diagnostics

The extension contains an optional crash-reporting component (Sentry) that is inactive in this version: no diagnostic data is transmitted. If we enable it, it would send only technical error information (error type, message, extension version) and never your pin data, and this policy will be updated first.

4. Data the licence service receives

To run the free trial and to activate a purchased licence, the extension contacts our Cloudflare Worker at api.pinwasp.com. That service receives:

• a random installation identifier created by the extension;
• a random recovery identifier (stored with Chrome Sync when available) so that reinstalling does not silently restart the trial;
• a SHA-256 hash derived from coarse, stable browser characteristics: platform/architecture class, 32/64-bit class, device-memory class, CPU-core count, touch support and, where Chrome exposes it, the mobile device model. Language, timezone, browser version and OS version are excluded, and the raw characteristics are never sent;
• your licence key and activation instance, when you have one;
• your IP address, unavoidably, as part of the HTTPS request. It is not stored raw: only a coarse network prefix protected with a server-side HMAC is kept.

The service also sets one strictly necessary cookie, __Host-pinwasp-device — a random identifier, HttpOnly and Secure, used only to recognise a returning installation and prevent repeated free trials. It carries no personal data and is not used for advertising or analytics. See the Cookie Policy.

No Pinterest pin data is ever included in these requests. The licence service does not receive your email address.

5. Data this website collects

This website is a static page. It sets no cookies, embeds no advertising or social trackers, and loads no third-party fonts or scripts. Your hosting provider processes standard server logs (including IP address) to deliver the page and protect against abuse.

If optional analytics are ever added, they will run only after you agree through the consent banner, and your choice is stored in your browser's local storage under pinwasp.consent.v1. You can change or withdraw it at any time via Cookie preferences in the footer.

6. Legal bases (GDPR Article 6)

7. Retention

• Collected pins and settings: kept on your device until you delete them ("Remove all pins", "Delete matching") or uninstall the extension. We cannot access or delete them for you.
• Trial records (pseudonymous aliases, HMAC-protected network prefix, trial start/end dates) in Cloudflare D1: retained for [TRIAL_RETENTION_PERIOD] after the trial ends, because deleting them earlier would let the same installation restart the free trial indefinitely.
• Licence activation records: kept while the licence is active, and afterwards for as long as required for accounting and dispute handling.
• The __Host-pinwasp-device cookie: up to [DEVICE_COOKIE_MAX_AGE]; you can delete it by clearing cookies for api.pinwasp.com.

8. Processors and international transfers

These providers may process data outside your country, including in the United States. Where required, transfers rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism offered by the provider.

We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are used in the CCPA/CPRA.

9. Extension permissions

10. Your rights

Subject to local law, you may request access to, correction of, or erasure of your personal data; ask us to restrict processing; object to processing based on legitimate interests; request portability; and withdraw consent where processing relies on it. Write to [SUPPORT_EMAIL] and we will respond within one month.

Because trial records are pseudonymous, we may need the installation identifier shown in the extension's settings to locate them. If we cannot link a request to stored data, we will tell you.

If you are in the EEA or the UK, you may also lodge a complaint with your local data-protection authority. In the EEA our lead authority is [SUPERVISORY_AUTHORITY].

For pins and settings stored on your device, you exercise these rights directly: use the Pin Stats table to delete records, or uninstall the extension to remove all of its local data.

11. Children

PinWasp is not directed to children under 13 (or the minimum age in your country) and we do not knowingly collect their data.

12. Changes to this policy

We may update this policy as the product evolves — for example, when optional cloud sync is introduced. Material changes will be published on this page with a new "Last updated" date, and where the law requires it we will ask for your consent again.

13. Contact

Questions about this policy or about your data: [SUPPORT_EMAIL]. See also the Terms of Service, Cookie Policy and Refund Policy.