Privacy Policy
Last updated 26 October 2026
Pinnote stores what it needs to collect website feedback for you: your account, your sites, and the notes and screenshots your reviewers leave. We don't sell data, show ads or use tracking cookies. Data is stored in Mumbai, India.
Who we are
Pinnote (pinnote.app) is a tool for collecting feedback on websites. In this policy, "we" means Pinnote, "you" means someone with a Pinnote account, and "reviewers" means the people you invite to give feedback on your site.
For your account, we decide how your data is used. For the feedback your reviewers leave on your site, you decide, and we process it on your behalf to run the service. If you're a reviewer, the site that invited you is the best first contact for questions about your feedback; you can also reach us at the address below.
What we collect
From you, when you have an account
- Your name and email address, and a hash of your password (we never store the password itself).
- If you sign in with Google: your Google account's identifier, its email address and your name. We don't ask Google for anything else, such as your contacts or files.
- The sites you add, their addresses and settings, and the people you invite.
- Your choices, such as email notification settings, and keys you create for AI agents (stored as a fingerprint, not the key).
- Your replies to feedback.
- Feedback you send us with the Feedback button in your dashboard: what you write, under your name and email, with a screenshot of the dashboard page you were on and your browser's details. We use it only to fix and improve Pinnote.
- Where your sign-up came from: the campaign tag in the link you followed (such as utm_source), the site that linked to pinnote.app, and the first page you opened. We note it once, when you create your account, to learn which places bring people to Pinnote.
From reviewers, when they leave feedback
- Their name and email address, as given in your invite or by your own app when it signs them in, and an identifier for them on your site. On an address you've opened to Everyone, or through your share link, reviewers type a name themselves (or stay anonymous). If they also type an email to get replies, we send one message asking them to confirm it, and use it for nothing else until they do.
- What they write, and when.
- A screenshot of the page as they saw it, the page address, the part of the page they pointed at (its tag, text and a trimmed copy of its HTML), their screen size, browser and language, and the last few error messages the page logged (up to 20, cut short), which help your developers fix what the reviewer saw. Anything they draw on the page becomes part of the screenshot.
- Whether they asked to be emailed about replies.
If your site signs its own users in to Pinnote, it may send us every logged-in user's name and email so that Pinnote can check them against your list of reviewers. For anyone who isn't on the list, we keep nothing. The check happens and the answer is "no".
Screenshots show what was on screen, with private parts hidden. Before a screenshot is taken, in the reviewer's browser, the widget covers what's typed or picked in form fields, text boxes, dropdowns and editable areas, and anything the site marks as private; notes pinned on those leave out their text. A site can also choose to hide every word in its screenshots. Anything else a page displays, such as personal information shown as ordinary text, can still appear, so don't invite reviewers to pages that show data they shouldn't see.
Automatically
- Short-lived technical logs on our servers, such as IP addresses and request details, used to keep the service secure, stop abuse and fix problems.
Cookies and browser storage
We use no advertising or analytics cookies and load no third-party tracking scripts. We use:
- One sign-in cookie on pinnote.app, so you stay signed in to the dashboard. It lasts up to 30 days or until you sign out.
- Tab storage on pinnote.app for the campaign tag and referring site described above, until you close the tab, so they can be saved with your account if you sign up. Signing up with Google carries them in a short cookie for up to 15 minutes.
- Browser storage on your site, for reviewers only: the widget keeps a sign-in token (for invited reviewers) or a random key (for people who named themselves on a site open to everyone, or opened your share link) in the reviewer's browser, so they aren't asked again each visit, and remembers for the current tab whether review mode is on. Other visitors get nothing stored. On a site using the plain script tag, each visitor's browser asks Pinnote whether feedback is open there, at most once every five minutes, which leaves only the short-lived technical logs described above.
The browser extension
The Pinnote extension for Chrome and Edge lets reviewers use Pinnote on a site that doesn't have its script tag. It runs on pinnote.app, and on a site only after the reviewer opens a Pinnote link to it and allows it there; Chrome asks them first. It doesn't read pages or record browsing anywhere else, and only talks to pinnote.app.
- In the browser: for each site it's on, the site's address and its public Pinnote key, so it comes back on the next visit. Turning it off for a site from the toolbar removes both, and Chrome's permission with them.
- Sent to Pinnote: only what the widget sends on a site with the script tag, described above: the notes, replies and screenshots the reviewer chooses to post, and the page details that go with them.
We don't sell or transfer this data, use it for anything but running Pinnote, or use it to decide creditworthiness.
How we use it
- To run Pinnote: show feedback to you and your reviewers, and keep conversations in place on your pages.
- To send emails you need (confirming your address, resetting your password, invites) and emails you turned on (notifications).
- To keep the service secure and working, and to answer you when you contact us.
- To take payment for Pro (see Payments below).
- To tell real people from automated sign-ups when you create an account (see Cloudflare below).
We don't sell personal data, use it for advertising, or use your feedback content to train AI models.
Where it's stored and who processes it
Your data is stored on servers in Mumbai, India. We use these providers to run Pinnote:
| Provider | What for | Where |
|---|---|---|
| Hostinger | Servers and storage for the whole service | Mumbai, India |
| Resend | Sending emails (address confirmations, password resets, invites, notifications) | A US company; emails can be processed outside India |
| Telegram | Telling our team about new sign-ups (your name and email) and about server problems | Telegram's own privacy policy applies; messages can be processed outside India |
| Signing in with Google, if you choose to | Google's own privacy policy applies to your Google account | |
| Dodo Payments | Payments for Pro, as the seller of record | Dodo's own privacy policy applies to payment details |
| Cloudflare Turnstile | A check on the sign-up form that tells people from bots. It runs in your browser while you sign up and may read technical signals from it, such as the browser and IP address; it sets no tracking cookies. | Cloudflare's own privacy policy applies; it can be processed outside India |
| Cloudflare R2 | Encrypted off-site copies of our database, so data survives the loss of our servers | Cloudflare's storage; copies can be stored outside India |
AI agents you connect. If you create an API key and connect a coding agent such as Claude Code, Codex or Cursor, that agent reads your feedback (including screenshots) on your instruction, and its provider handles that data under its own terms. You can switch a key off at any time.
GitHub, if you connect it. When you send a note to GitHub, it becomes an issue in the repository you chose: the note and replies, the reviewer's name (not their email), the page and element, and a link to the screenshot that anyone with the issue can open. GitHub then handles that issue under its own terms. Deleting the note in Pinnote stops the screenshot link working; delete the issue on GitHub too if you want it gone there.
Slack and webhooks, if you connect them. On Pro, you can have new feedback, replies and status changes posted to a Slack channel or to a web address of your own. Each message carries the note's text, the reviewer's name (not their email), the page and a link to the note. Slack, or whoever runs the address you chose, then handles it under its own terms. Team-only notes are never sent.
We may also share information if the law requires it, or to protect Pinnote, our users or the public from harm.
Payments
Payments are handled by Dodo Payments, who act as the seller and merchant of record. We don't see or store your card or bank details; we only learn your plan and whether payment succeeded.
How long we keep it
- Your account data: for as long as you have an account.
- Feedback and screenshots: until you delete them, by deleting a note, the site it belongs to or your account. On the Free plan the dashboard shows the last 30 days of feedback, but older notes are kept, not deleted, and come back if you move to Pro.
- Single-use email links (invites, confirmations, resets) expire on their own and are cleared.
- Server logs: kept briefly, then deleted.
Deleted data stays in our backups until they expire: daily copies are kept for 30 days, weekly copies for 120 days and monthly copies for 400 days. Backups are only used to restore the service after a failure.
Your choices and rights
You can see and change your name, email address, password and email settings on your Account page in the dashboard, withdraw a reviewer's access, and delete any of your sites with everything in it. You can also ask us to:
- give you a copy of your data,
- correct it,
- delete your account and all of its data,
- or stop sending you emails (every notification email also has a one-click unsubscribe link).
Email support@pinnote.app from the address on your account and we'll act within 30 days. Depending on where you live, laws such as India's Digital Personal Data Protection Act or the EU and UK GDPR may give you further rights, including to complain to your local data protection authority.
Security
All traffic is encrypted with HTTPS. Passwords are stored as one-way hashes, site secrets are encrypted, and sign-in, invite and API tokens are stored only as fingerprints. Only the people in your workspace can see your sites' feedback. No system is perfectly secure; if something goes wrong that affects your data, we'll tell you promptly.
Children
Pinnote isn't meant for anyone under 16, and we don't knowingly collect their data.
Changes to this policy
If we change this policy in a way that matters, we'll email account holders before the change takes effect and update the date at the top of this page.
Questions about this page? Email support@pinnote.app.