Privacy Policy
Effective 12 September 2026. Covers the Pinback extension for Chrome and the site pinword.pages.dev.
The short version. Pinback has no sign-up, no login and no password — not for you, and not for whoever opens the link you send. We run no analytics, show no ads and sell no data.
What reaches the server is exactly what you put into a report: the page snapshot, your notes and your recordings. After 45 days it deletes itself.
Until you press “Collect link”, everything stays in your browser only.
1. Who is responsible
Pinback is built by an independent developer. Write to methodforms@gmail.com — same address for deleting a report early, or for any question about this document.
2. What the extension does on a page
The extension works only on the tab where you turned on edit mode — by the button, the keyboard shortcut or the right-click menu. Before that it does not read the page and does nothing to it.
Technically this is the activeTab permission: Chrome grants access to one active tab, and only after your action. Pinback does not ask for “read and change your data on all websites”.
3. What goes into a report and reaches the server
A report is built when you press “Collect link”. It contains:
| What | Where it comes from | How long it lives |
|---|---|---|
| Page snapshot | Drawn in your browser from what is on screen | 45 days |
| Your notes | You write them yourself | 45 days |
| Voice notes and screen recordings | Recorded when you press record, with an indicator while recording | 45 days |
| Attached files | You attach them yourself, up to two | 45 days |
| Page URL and title | From the page you are annotating | 45 days |
| CSS selector, sizes, fonts, element text | From the page — this is what the developer needs the report for | 45 days |
| Window size, zoom, browser name | From your browser | 45 days |
Reports live in Cloudflare Workers KV and are deleted automatically after 45 days. That period cannot be extended, and we keep no backups that would outlive the deletion.
One thing worth understanding. A page snapshot is a picture of what was on your screen. If you annotate an account page, an inbox or an admin panel, everything shown there ends up in the picture — including other people's names, addresses and amounts. That call is yours, not ours: the extension captures exactly what you showed it. Take a look at the result before you send it.
4. Who can open a report
A report address is eight random characters — around 850 billion combinations. It cannot be guessed, and search engines are kept out by robots.txt. But a report has no separate password: whoever knows the link sees the contents. Send it to people you trust.
5. What appears on the shared board
Every report has a shared board, where the developer marks things done and replies to your notes. It stores:
- “done” marks with the note number and a timestamp;
- replies to notes, up to 1000 characters;
- transcripts of voice notes;
- a counter of how many times the report was opened;
- a name, if the person typed one — an optional field up to 60 characters; decline it and “No name” is used instead. This is the only place in the whole product where anyone enters anything resembling a name.
The board lives as long as the report and is deleted with it.
6. Speech transcription
A voice note can be turned into text. This happens only when someone presses the button — nothing is transcribed on its own. At that moment the audio track is sent to Cloudflare Workers AI (Whisper model), the text comes back, is stored on the report's board and is deleted together with it. Cloudflare acts as a processor and does not use this data to train its models.
7. What stays in your browser
None of this reaches the server:
- draft notes until you collect a link — so they survive a page reload;
- recording settings: audio, quality, chosen microphone;
- the list of links you collected — the side panel needs it;
- a device key — a random 22-character string the extension makes up for itself on first run. Not tied to any identity, registered nowhere, and gone when the extension is removed.
When the device key leaves your browser
In exactly three cases, all of them about inviting friends:
- you opened “Invite a friend” and the extension asks for your code;
- you applied someone else's invite code;
- one single report upload — the one that settles the invitation.
On every other report the key is not in the request, and no report can be tied back to a device. On the server, that key holds only a six-character invite code and two counters — how many friends arrived and how many days are banked. No address, no email, no country.
8. What we never collect
- Sign-up, login, password — they do not exist here.
- Email, phone number, real name — we do not ask.
- IP addresses — not written to any log.
- Browsing history — the extension sees only the page where you turned edit mode on.
- Analytics, visitor counters, advertising pixels — the site has none.
- Cookies — we set none.
A visitor's country is resolved on the fly by Cloudflare, purely to check whether payment can be accepted from there. It is stored nowhere.
9. Who else gets the data
One contractor only — Cloudflare: the site runs on its infrastructure, reports live there and transcription runs there. Nobody else receives the data.
We do not sell data, do not pass it to ad networks, do not use it to show ads and do not use it to train models. What is collected serves only the purpose the product exists for: showing a report to whoever you gave the link.
10. How to delete data
- Do nothing. Every report disappears on its own after 45 days.
- Write to us at methodforms@gmail.com with the report link — we will delete it sooner.
- Remove the extension. Drafts, settings, the list of links and the device key leave your browser with it. Reports you already sent live out their 45 days — their recipients have the addresses.
11. Children
Pinback is a working tool for people who build websites. It is not intended for children, and we deliberately do not collect children's data.
12. Changes
If anything in the product changes how data is handled, we will update this document and change the date at the top. Material changes will be shown inside the extension before they take effect.
13. Contact
Questions, deletion requests, objections to this text — methodforms@gmail.com. A person answers, not a robot.