Privacy Policy

Last updated: August 24, 2026

1. Information we collect

• Account information: your email address, a password, and an internal account identifier used to link your saved places, purchases, and subscription status to your account. Your password is never stored as plain text — it's hashed with bcrypt before it touches our database, meaning even we can't see or recover it.
• Places you save: when you save a place from Google Maps, we store the place's public listing details — name, address, coordinates, phone number, website, Google rating, hours, price range, and place type — plus Google's own place identifier for that location. This is public information already shown on the Google Maps page you saved it from. These coordinates describe the place itself, not your device — we do not collect, request, or track your device's GPS or network location.
• Content you create: any notes you add to a saved place, plus the categories, colors, icons, and collection/list names you create to organize your places.
• Search activity: when you search or filter your saved places — in the extension, on the website, or in the mobile app — the search terms you enter are sent to our server to return matching results.
• Subscription and purchase information: if you're on a paid plan, we do not collect or store your card details ourselves. Web purchases are processed by Paddle; purchases made through the Android app are processed through Google Play Billing via RevenueCat, our mobile subscription-management provider. We receive your subscription status and which plan is active — not your Google Play payment card details.
• Crash logs and diagnostics (mobile app): our Android app uses Sentry, an error-monitoring service, to help us detect and fix crashes and technical problems. This includes device/app diagnostic information (such as device model, OS version, and app version) and a short technical log of recent app activity ("breadcrumbs") attached to an error report when a crash or error actually occurs. That log isn't designed to capture personal content, but because it reflects recent app activity, it can in some cases include an account email address or the text of a saved-place note if an error happened around the same time. This only happens when an error is captured — it is not routine tracking of what you type.

2. How the extension and mobile app access your data

PinTagged's browser extension only runs on google.com/maps pages — it has no access to any other website you visit. When you click "save" on a place, the extension reads the place details directly from the Google Maps page you have open — using a content script that only runs on google.com/maps — and sends them to our server. The storage permission is used only to keep you signed in locally in your browser; it does not track your browsing. The PinTagged Android app works the same way for places you save or share into it from Google Maps, and additionally lets you search your saved places and manage a Google Play subscription. When you click a saved place to open it in Google Maps, we record that this happened — which place, and when — so we can understand whether the places you save are actually useful to you. This is the only additional usage information we collect beyond what's needed to save, search, and manage your places.

We do not use any third-party advertising or ad-tracking scripts on our website, browser extension, or mobile app. The service providers described in Section 4 process data only to provide the specific function they're used for — email delivery, payment/subscription processing, or crash diagnostics — never for advertising, and we never sell your data to anyone.

3. How we use your information

We use your information for: providing the core service (saving, organizing, searching, and displaying your places); account management (creating and maintaining your account, and sending email verification via Resend); subscription and entitlement management (recognizing an active paid plan via Paddle or Google Play/RevenueCat); reliability and troubleshooting (using Sentry crash and diagnostic data to find and fix bugs in the mobile app); and security, fraud prevention, and legal/financial compliance.

4. Data sharing

We do not sell your data. We do not share it with advertisers. The service providers we use, and what each receives, are:

• Resend — your email address, solely to send account verification email.
• Paddle — your email and subscription details, solely to process web payments and manage your subscription.
• RevenueCat and Google Play Billing (Android app only) — your purchase history and an internal account identifier, solely to process and manage your Android subscription.
• Sentry (mobile app only) — device/app diagnostic data and crash reports, solely to detect and fix technical problems. As described in Section 1, a crash report's technical log can, in limited cases, incidentally include recent account or note content if an error occurred around the same time.

Each provider processes data only on our behalf, for the specific purpose above, under its own security practices — none of them may use your data for their own independent purposes such as advertising.

5. Data retention and deletion

We retain your account and saved-place data for as long as your account is active. You can delete individual saved places at any time without deleting your account. You can request deletion of your entire account and all associated data at pintagged.com/delete-account.html, or by emailing support@pintagged.com directly. After a deletion request, we retain a limited amount of data only where reasonably necessary — for example, financial records required for tax/accounting purposes, security or fraud-prevention logs, or routine backups — and only for as long as necessary for those purposes.

6. Security

Passwords are hashed with bcrypt. Sign-in uses time-limited authentication tokens. All traffic between our browser extension, website, mobile app, and server is encrypted in transit (HTTPS/TLS).

7. Children's privacy

PinTagged is not directed at children under 13, and we do not knowingly collect information from children under 13.

8. Changes to this policy

If this policy changes, we'll update the "Last updated" date above.

9. Contact

Questions about this policy: support@pintagged.com