Privacy Policy

Last updated: 15 September 2026

1. Who we are

PinSpark ("we", "us") operates the website at getpinspark.com. PinSpark is an independent, one-person project building Pinterest pin tools for food bloggers. You can reach us any time at hello@getpinspark.com, and the person who replies is the person who wrote the code.

2. What we collect, and when

a. If you use the pin generator

Everything happens in your own browser: the photo you pick, the title, the palette, and the layouts are all processed locally, and the pin images are rendered on your device. We never receive them.

The one exception is the blog post URL you paste in. To pull the title and preview image from a post, that URL is sent to our server (a Netlify Function) so it can read the public page and return its og:title and og:image. We use it only for that single request, we do not log or store it, and we do not keep a copy of the page. If you'd rather not send a URL, you can upload your own image and type the title by hand instead.

b. If you use the free tools (title generator, color palette, description writer, hashtag builder)

Nothing is collected. These tools are plain JavaScript that runs in your own browser. The topics, words, and text you enter are processed locally on your device and are never transmitted to us or to any third party.

c. If you get in touch about Brand

Brand is our paid plan, and today the only way to start on it is to email us — there is no card form and no checkout on this site. When you email, you give:

• Your email address — used to reply to you and to send you the plan details.
• Whatever you choose to write in the message — usually your blog and your Pinterest address. We never ask for payment details by email, and you should not send them.
• Anything you put in your brand kit — your logo, colours, and font choices. This stays in your browser; we do not upload or store your brand kit on our servers.

That's the entire list. We do not ask for your name, phone number, address, or anything else.

d. If you connect a Pinterest account

Connecting is optional. The pin generator works without it, and you can always download your pins and upload them to Pinterest yourself.

If you do connect, signing in happens on Pinterest's own website. We never see or store your Pinterest password. Pinterest then gives us an access token, which we keep in a cookie on your own device. That cookie is marked HttpOnly, which means scripts running on our page cannot read it. We use the token for three things only: listing your boards, creating a pin you have explicitly confirmed, and refreshing the token when it expires.

We do not read your pins, your followers, or your analytics, and we do not post or schedule anything you have not pressed Publish on.

You can disconnect at any time with the Disconnect button next to the board picker, which deletes the token from your device. You can also revoke our access from your Pinterest account settings.

e. Server logs

The site is served by Netlify, our hosting provider. Like any web host, Netlify may record standard technical data such as your IP address, browser type, and the pages you request. This is used for security and to keep the site online. We do not use it to identify or profile you.

3. How payment is processed

There is no checkout on this site yet, and no card details are collected here. If you want Brand, you email us and we reply with the details, one person to another. If and when we add a card form, it will be handled by an established payment provider on their own secure page — your card number will never pass through PinSpark — and we will update this section before that changes.

We do not add you to any marketing list, and we do not send you anything other than email related to what you asked about.

4. What we do not do

• We do not run Google Analytics, Plausible, Fathom, or any other analytics tool.
• We do not use advertising pixels, retargeting tags, or social media trackers.
• We do not set tracking or advertising cookies, and nothing here follows you to other sites. Two cookies exist, only if you press Connect Pinterest: a short-lived sign-in check, and the Pinterest token itself. Both are HttpOnly — the page's own scripts cannot read them, and neither is used to identify you anywhere else.
• We do not sell, rent, or trade your personal data to anyone.
• We do not build profiles of you or make automated decisions about you.
• We do not store the pins you generate, or the brand kits you set up.
• We do not read, post to, or schedule anything on your Pinterest account — the only Pinterest write we ever make is the single pin you press Publish on.
• We do not ask for, or want, your Pinterest password.

5. How long we keep your data

If you email us about Brand, we keep your email address for as long as we need it to answer you and to keep our own records, and then we delete it. If we later take payment through a provider, we keep billing records for as long as tax rules require. Your brand kit is never on our servers to begin with — it lives in your browser and disappears when you clear your browser data. A Pinterest token lives in a cookie on your own device until you disconnect or it expires.

6. Your rights

You can contact us at hello@getpinspark.com at any time to:

• Ask what data we hold about you (normally just your email address).
• Have your data corrected or deleted.
• Cancel your plan and have your details removed.

We will action any such request within a reasonable period, and normally much sooner. Email us to cancel at any time — your access simply ends at the end of the period you've paid for. Disconnecting Pinterest is instant and doesn't need us at all.

If you are in the European Economic Area or the United Kingdom, you have additional rights under the GDPR, including the right to lodge a complaint with your local data protection authority. If you are a California resident, you have rights under the CCPA. Because we collect so little — an email address you gave us voluntarily — these rights are easy for us to honour: just email us.

7. International transfers

Our service providers — Netlify (hosting and functions) and, only if you connect an account, Pinterest (publishing) — may store and process data on servers located outside your country. Where required, they rely on standard contractual clauses or equivalent safeguards.

8. Children

PinSpark is a tool for bloggers and other adults. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.

9. Security

The site is served over HTTPS. We keep the amount of personal data we hold to an absolute minimum, which is the most reliable form of security: there is very little to leak. Your brand kit never leaves your device. A pin image and its title are sent to Pinterest only when you press Publish on that pin, and nowhere else. A Pinterest access token is stored in an HttpOnly cookie, so a scripting bug on our own page could not read it, and every token exchange happens on our server where the app secret lives — never in the browser.

10. Changes to this policy

If we change this policy, we will update the "last updated" date at the top of the page. If the change is significant — for example, if we ever store your pins on our servers or add a new third-party service — we will make that clear rather than quietly editing the fine print.