Pinpoints

Your data

Privacy policy

Last updated: 4 July 2026

Pinpoints hosts design previews and collects the feedback pinned to them. This page explains what we store and why. The short version: we store what makes the product work, nothing more, and we don't sell any of it.

What we collect

• Account data. Your email address and a salted hash of your password. We never store the password itself.
• Reviewer identity. When a client leaves feedback they enter a name, and optionally an email, so comments are attributed. That's stored with their comments.
• Feedback content. Comments, replies, sign-offs, the element each comment is pinned to, and an automatic screenshot of that element.
• Preview content. The HTML you upload or import for hosting.
• Technical basics. Browser user-agent and viewport size with each comment (to reproduce issues), and IP-based rate-limit counters that expire automatically.

What we don't do

• No selling or sharing of personal data with third parties.
• No advertising trackers and no third-party analytics scripts.
• No marketing email. Transactional email only (for example password resets).

Where it lives

Everything runs on Cloudflare infrastructure (Workers, D1, KV). Data is encrypted in transit; preview links are unguessable tokens and are marked noindex so search engines stay out.

Cookies

One cookie: pp_session, an HttpOnly session cookie set when an account owner signs in. Clients reviewing a preview never get a cookie; their display name is kept in their own browser's local storage.

Retention and deletion

Deleting a preview permanently removes its feedback, replies, sign-offs, screenshots and hosted files. To delete your account and everything in it, email us and we'll do it.

Contact

Questions or requests: aldo@uxconstellation.com.

Pin it. Approve it. Ship it.