In short. Pin Pal works without an account, and then everything stays on your computer. If you sign in, Pin Pal stores your data so it can sync. The extension never reads the content of the pages you visit, shows no ads and runs no analytics, and I never sell your data. The website measures visits with Vercel’s cookieless analytics, Google Analytics and Microsoft Clarity. Visitors in Europe get no analytics cookies and are never recorded. You can export or delete everything at any time.
Who I am
Pin Pal is a Chrome extension, a website at pin-pal-website.vercel.app, and an optional subscription called Pin Pal Pro. I’m Praveen BV, a solo developer based in India, and I build and run Pin Pal on my own (“I”, “me”, “my”).
I decide how and why your personal data is processed, so I’m the data controller under the EU and UK GDPR and the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023. You can reach me at hello@praveenbv.com.
This policy covers the extension, the website and Pin Pal Pro. It doesn’t cover the websites you save in Pin Pal, Google’s own services or Chrome, which have their own policies.
What Pin Pal collects and why
If you use Pin Pal without an account
Everything stays in Chrome’s storage on your computer: your shortcuts, categories, settings, background image, the order of your most-used shortcuts and any snoozed tabs. None of it is sent to me, and I can’t see it.
If you sign in with Google
Signing in is optional and only needed for sync. When you sign in, Google shares your name, email address, profile picture and Google account ID with Pin Pal. I never see your Google password, and Pin Pal doesn’t ask for access to Gmail, Drive, Contacts or any other Google data.
While you’re signed in, Pin Pal stores your Pin Pal data in your account so it can sync to your other computers:
- shortcuts (name, web address, category and any custom icon), categories, Spaces and their schedules, and settings
- records of shortcuts you delete, so the deletion reaches your other computers and so Pro can show the last 30 days of them in the trash
- your background image, only with Pro; on the free plan it never leaves your computer
Tabs you act on
Pin Pal reads a tab’s web address and title only when you ask it to: when you save a page, stash a window’s tabs, snooze a tab, or when quick search switches to a tab that’s already open. Saved pages become shortcuts (and sync if you’re signed in). Snoozed tabs stay on your computer.
Pin Pal has no access to the websites themselves. It can’t read, change or record what’s on any page, what you type into websites, or your browsing activity.
History and bookmarks in search (Pro, optional)
If you turn on “Include history and bookmarks” in search, Chrome asks for your permission first. Pin Pal then searches your Chrome history and bookmarks on your computer only. They’re never sent to me or anyone else, and you can turn this off, and remove the permission, at any time.
Subscriptions and payments
When you buy Pin Pal Pro, checkout is run by Dodo Payments, my merchant of record. Dodo collects your payment details, billing address and the information it needs for tax, under its own privacy policy. I never receive your card details.
Pin Pal keeps only what it needs to know whether Pro is on: your plan, its status, trial and renewal dates, and the customer and subscription IDs Dodo provides.
Site icons
To show a site’s icon, Pin Pal asks Google’s public icon service for it, sending only the site’s domain (for example, github.com), never the full address. Like any web request, Google also receives your IP address. The icon is then kept on your computer.
When you contact me
If you email me, I receive your email address and whatever you choose to send, and use it to help you.
The website
The website uses no advertising tags, and the only cookies it sets are the Google Analytics and Microsoft Clarity cookies described below. Your theme choice (light, dark or system) is saved in your own browser and never sent to me. My host, Vercel, keeps standard server logs (such as IP address, browser type and time of request) to deliver the site and keep it secure. Logo images on the site load from Logo.dev, which receives your IP address the way any image server does.
To learn how many people visit and how fast pages load, the website uses Vercel Web Analytics and Vercel Speed Insights. They set no cookies and don’t follow you across other sites. Vercel records the page you viewed, the site that sent you, and your country, browser, operating system and device type, and tells visits apart with an anonymous identifier that’s discarded within a day. Speed Insights measures how quickly pages load and respond. I only see totals, never individual visitors.
The website also uses Google Analytics 4 to understand how people find and use it. It records the pages you view, the site that sent you, and your approximate location, browser and device. Outside the EEA, the UK and Switzerland, it sets first-party cookies (_ga and _ga_ followed by an ID) that last up to two years, so repeat visits can be told apart. In the EEA, the UK and Switzerland it sets no cookies and sends only cookieless signals that Google uses to estimate totals. Google Analytics doesn’t log or store IP addresses. Advertising features, Google signals and ad personalization are switched off, and this data is never used for advertising. Google handles it under its privacy policy and data processing terms. You can opt out with Google’s opt-out browser add-on or by blocking cookies in your browser.
The website also uses Microsoft Clarity to see how people use its pages, through heatmaps and session replays: recordings of clicks, scrolls and mouse movement on the website, from which I can see where a page is confusing. Text you type is masked and isn’t recorded. Clarity sets cookies (such as _clck and _clsk, lasting up to a year) to group pages into one visit. Clarity doesn’t load at all for visitors in Europe: if your device’s time zone is in Europe, Iceland, the Faroe Islands, the Canary Islands, Madeira, the Azores or Svalbard, no Clarity cookies are set and nothing is recorded. Microsoft handles this data under its privacy statement and doesn’t use it for advertising on my behalf.
None of this website measurement runs inside the extension.
What the extension never collects
The content of pages you visit, what you type into websites, your full browsing history, your location, advertising identifiers, or usage analytics of any kind.
How your data is used
Your data is used only to run Pin Pal and the features you choose:
| Purpose | Data used | Legal basis (EU and UK GDPR) |
|---|---|---|
| Sign you in and sync your Pin Pal data | Account details, Pin Pal data | Performing my contract with you |
| Run Pro, the free trial and billing | Plan, status, dates, Dodo IDs | Performing my contract with you |
| Answer your questions and requests | Your emails | My legitimate interest in helping you, or my contract with you |
| Keep Pin Pal secure and prevent abuse | Account details, technical logs | My legitimate interest in a safe service |
| Count website visits and measure page speed | Anonymous page views, page-speed measurements, Google Analytics cookie IDs and visit data | My legitimate interest in improving the website |
| See how visitors use the website (heatmaps, session replays) | Clicks, scrolls and mouse movement on the website, Clarity cookie IDs | My legitimate interest in improving the website |
| Meet legal obligations | Billing records, requests | Legal obligation |
Where Pin Pal relies on your consent (for example, the optional history and bookmarks permission), you can withdraw it at any time.
I don’t sell your data, share it for advertising, use it to build advertising profiles, use it to train AI models, or make automated decisions about you that have legal or similar effects.
Google user data
Pin Pal’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, Pin Pal uses Google sign-in data only to identify you and sync your Pin Pal data. I don’t transfer it to others except as needed to provide Pin Pal, for security, or to comply with the law, and I don’t read it unless you ask me to (for example, for support), it’s needed for security, or the law requires it.
Pin Pal also complies with the Chrome Web Store User Data Policy. It handles user data only for its single purpose: a new tab dashboard for saving, organizing and opening the sites and tabs you use.
Who your data is shared with
Pin Pal shares data only with the service providers that help me run it, and only what each one needs:
| Provider | What they do for Pin Pal | Data they handle |
|---|---|---|
| Supabase | Database, sign-in and file storage for sync | Account details, Pin Pal data, Pro background image, plan status |
| Sign-in with Google, site icons, and Google Analytics for the website | Sign-in details; site domains for icons; website visit data | |
| Dodo Payments | Checkout, billing, tax and invoices, as merchant of record | Payment and billing details (under Dodo’s own policy) |
| Microsoft | Microsoft Clarity heatmaps and session replays for the website, outside Europe | Website interaction data (under Microsoft’s own statement) |
| Vercel | Hosting the website, visitor counts and page speed | Standard server logs, anonymous page views, page-speed measurements |
| My email provider | Delivering support emails | Messages you send me |
I may also disclose data if the law requires it, to protect the rights, safety or property of Pin Pal’s users or others, or as part of a sale or transfer of Pin Pal. If Pin Pal changes hands, I’ll tell you before your data falls under a different privacy policy.
Where your data is stored
Your account data is stored on Supabase’s cloud servers, and my other providers may process data in other countries. This can mean your data is stored or processed outside your country, including outside India, the UK and the European Economic Area. When data leaves the UK or EEA, I rely on safeguards such as the European Commission’s Standard Contractual Clauses included in my providers’ data processing terms.
How your data is protected
- Sign-in uses Google with PKCE through Chrome’s own sign-in API, so there are no Pin Pal passwords to leak.
- Every connection uses HTTPS.
- Each account’s rows are locked by database rules so only that account can read or change them, and background images sit in private storage.
- Card details never reach me.
- All of Pin Pal’s code ships inside the extension. It loads no remote code.
No system is perfectly secure. If a breach affects your personal data, I’ll notify you and the relevant authorities as the law requires.
How long data is kept
- On your computer: until you delete it or remove Pin Pal. Signing out removes Pin Pal’s data from that computer; it stays in your account.
- In your account: for as long as your account exists. Removing the extension doesn’t delete your account.
- When you delete your account: your account, synced data and background images are erased straight away, and any subscription is cancelled. Copies in my providers’ routine backups are overwritten on their normal schedule.
- Billing records: Dodo Payments keeps transaction records for as long as tax and accounting laws require.
- Website analytics: Google Analytics deletes visit-level data after the retention period set in my account, at most 14 months. Microsoft Clarity keeps session recordings for about 30 days and other data for up to 13 months. Vercel keeps only aggregated totals.
- Support emails: for as long as I need them to help you and keep a record of the request.
Your rights and choices
You can do most of this yourself in Pin Pal:
- Use Pin Pal without an account, so nothing reaches me at all.
- Get a copy of your data: Customize, then General, then Backup exports everything to a file.
- Correct it: edit any shortcut, category or setting.
- Delete it: open your profile (bottom left), then Account, then Delete account. Or email me and I’ll do it.
- Opt out of website analytics: use Google’s opt-out add-on, or block cookies or scripts from clarity.ms in your browser. Visitors in Europe get no analytics cookies and are never recorded.
- Withdraw access: remove Pin Pal from your Google account at myaccount.google.com/permissions, and remove optional permissions in
chrome://extensions.
Depending on where you live, you may also have the right to access, correct, delete, restrict or object to the use of your data, to data portability, and to withdraw consent. In India, you can also nominate someone to exercise your rights if you die or become unable to. To use any of these rights, email hello@praveenbv.com from the address on your account. I reply within 30 days, and I may need to confirm it’s you first.
If you’re unhappy with my answer, you can complain to your data protection authority, such as your local supervisory authority in the EU or UK, or the Data Protection Board of India.
California residents: I don’t sell or share personal information as the CCPA defines those terms, and I don’t use sensitive personal information to infer anything about you. You have the right to know, delete and correct your personal information, and I won’t treat you differently for using these rights.
Children
Pin Pal isn’t meant for children under 13, and I don’t knowingly collect personal data from them. If you’re under 18, use Pin Pal with an account only with the permission of a parent or guardian, who must also make any purchase. If you believe a child under 13 has given Pin Pal personal data, email me and I’ll delete it.
Changes to this policy
If I change how Pin Pal handles your data, I’ll update this page and the date at the top. For significant changes, I’ll tell you before they take effect, in Pin Pal or by email, so you can decide whether to keep using it.
Contact me
For privacy questions, requests or complaints, email me directly. I’m also Pin Pal’s grievance contact.
Praveen BV, Pin Pal, India. Email: hello@praveenbv.com
I read every message myself and reply as soon as I can, and always within 30 days for privacy requests.