Privacy Policy

Last updated: June 2025

Pinbox ("the extension", "the service") is a personal bookmark manager. This policy explains what data is collected, how it is used, and your rights.

1. Data collected by the extension

The Pinbox browser extension collects only the following data:

Authentication tokens — JWT access and refresh tokens are stored locally in chrome.storage.local on your device. They are never shared with third parties.
Active tab URL and title — read only when you open the popup, solely to pre-fill the bookmark save form. This data is sent to the Pinbox API only if you explicitly click "Save".
Bookmarks you save — URLs, titles, descriptions, folders, and tags you choose to save are stored in your Pinbox account on the server.

2. Data we do NOT collect

Browsing history
Tabs you did not explicitly save
Cookies, passwords, or any other page content
Device identifiers or analytics

3. Data storage and security

Your bookmarks are stored in a PostgreSQL database hosted on Neon (serverless PostgreSQL). The API is served via Vercel. All communication between the extension and the API uses HTTPS (TLS 1.2+). Passwords are never stored in plain text.

4. Data sharing

We do not sell, rent, or share your personal data with third parties. Data is only transmitted to the Pinbox API backend you have configured in the extension.

5. Data deletion

You can delete your bookmarks at any time from the Pinbox web interface. To request full account deletion, contact us at the email below.

6. Children's privacy

Pinbox is not directed at children under 13. We do not knowingly collect data from minors.

7. Changes to this policy

We may update this policy occasionally. Changes will be reflected by the "Last updated" date above. Continued use of the extension after changes constitutes acceptance.

8. Contact

For privacy questions or data deletion requests, open an issue on the project repository or contact the developer directly.