Privacy policy
Last updated November 15, 2026 (AI assistants, email, orders, how long we keep it)
PinOnce lets you publish notes, photos, short clips and voice notes on your own page, and copy them to social networks you connect. This page says plainly what we keep and what we do with it.
What we keep
- Your account: your nickname, the name and page title you choose, and a scrambled fingerprint of your sign-in key (never the key itself).
- What you pin: the text, photos, clips and voice notes you choose to publish. These are public on your page; that is the point of pinning.
- Connected accounts: when you connect Instagram, Threads, Bluesky, Mastodon or Pixelfed, we keep the access token that network gives us, encrypted, and your account name there. We use it only to post the pins you choose to send and to read your account name. We never read your messages, followers or other posts.
- Saved: links you save, with the page title and picture the page publishes, and your own note and tags. Saved is private to you.
- Storage use: how many bytes your files take, for your storage limit.
- Your email, if you give it: to send you sign-in links and nothing else. A sign-in link works once and expires after 15 minutes.
- AI assistants you connect (Claude, ChatGPT or your own agent): the assistant's name, when you connected it, and a scrambled fingerprint of its key. A connected assistant can pin, save and read your pins and Saved list on your behalf, and only after you approve it on PinOnce's own page. It can never delete anything or change your connected accounts. You can disconnect it any time in Settings → AI assistants.
- Orders: when someone buys a print or a download from your page, or you order one for yourself, we keep the item, the amount, the buyer's email and the shipping address, so the order can be made, delivered and looked up later.
What we don't do
- We don't sell or share your data, show ads, or track you across other sites.
- Photos are resized on your device and their location and camera data are removed before upload. If you allow it, your phone's location is used once to suggest a place name; the location itself is not stored.
- Suggestions (a title or description for a photo, speech to text) are made by AI models running on Cloudflare, which hosts PinOnce. What you send for a suggestion is not stored.
Who processes data for us
Cloudflare (hosting, storage, AI models), OpenStreetMap (turning a location into a place name), Resend (sending sign-in emails), Stripe (taking payments; we never see card numbers) and Printful (printing and shipping orders: it receives the photo, the buyer's name and shipping address). When you send a pin to a network, or an AI assistant you connected reads your pins, that service receives it under its own policy.
How long we keep it
Pins, Saved links and your account stay until you delete them. Deleting a pin removes its files from our storage right away; copies in caches are gone within an hour. Deleting your account removes your pins, files, connected accounts and assistant keys. Order records are kept after a pin or an account is deleted, because sales records must be kept for accounting and tax.
Your choices
You can delete any pin, disconnect any network, or delete your whole account: see Delete your data. Copies already posted on other networks stay there until you delete them on that network.