Privacy Policy

Last updated: November 27, 2025

Overview

SitePin is a website-annotation tool. This policy explains what information we collect through the SitePin web dashboard (app.sitepin.io) and the SitePin Chrome extension, how we use it, and the choices you have.

Data we collect

Account data

• Email address and name (from sign-up)
• Encrypted authentication tokens (stored in httpOnly cookies)
• Workspace and project membership

Annotation data (created when you drop a pin)

• The page URL the pin was placed on (with sensitive query parameters redacted — see below)
• The CSS selector and bounding box of the element you clicked
• A screenshot of the visible viewport, cropped to the element you pinned, plus 16px of surrounding context
• The text comment you typed
• Environment metadata: browser name and version, OS, device type, viewport and screen resolution
• Console errors that occurred on the page after you actively enabled pin mode (we do not record errors at other times)

Redacted by default

Query string keys commonly used to carry secrets are replaced with [redacted] before being sent. This includes: token, code, access_token, id_token, refresh_token, state, secret, password, api_key, key, auth, authorization, session, sid, csrf, email, otp, verification.

What the extension does not access

• We do not read browsing history outside of pages where you actively drop a pin.
• We do not record keystrokes, form values, or DOM content other than the element selector at the click location.
• We do not capture screenshots unless you click to drop a pin.
• We do not access cookies from any site other than app.sitepin.io (used only to read your SitePin auth token).
• We do not sell or share your data with advertisers or third-party data brokers.

How we use data

• To render your pins, screenshots, and comments in your SitePin dashboard.
• To deliver realtime updates to collaborators in your workspace (via Pusher).
• To send transactional emails (e.g. workspace invitations).
• To diagnose service issues — aggregated, non-personally-identifying logs only.

Service providers

We use the following sub-processors to operate SitePin:

• Neon — primary Postgres database (US/EU)
• Vercel — application hosting
• Pusher — realtime websocket delivery
• AWS S3 / equivalent — screenshot storage
• Resend — transactional email

Retention

Pins, screenshots, and comments are retained for as long as the owning project exists. When you delete a project, all associated pins and screenshots are deleted within 30 days. When you delete your account, your account data is deleted within 30 days and backups age out within 90 days.

Your rights

You can view, edit, and delete any pin you create from your dashboard. You can export your project data or request full account deletion by emailing privacy@sitepin.io. EU/UK residents have GDPR rights including access, rectification, erasure, restriction, portability, and objection. California residents have equivalent CCPA rights.

Security

Data is encrypted in transit (TLS 1.2+) and at rest. Authentication tokens are stored in httpOnly cookies and are never accessible to JavaScript on third-party pages. The Chrome extension reads your SitePin auth token through the privileged chrome.cookies API in its background service worker and uses it only to authenticate API calls to app.sitepin.io.

Children

SitePin is not intended for children under 16. We do not knowingly collect data from children.

Changes

We will update this page and the "last updated" date when this policy changes. Material changes will also be announced inside the dashboard.

Contact

Questions or requests: privacy@sitepin.io