Privacy

Pin lets you mark a UI, talk or type a note, and share a review link. You can also send that review to a coding agent that already runs on your machine.

If you log in, we keep a basic account record from the provider you use (GitHub, Google, or Apple): an id, and usually a name and email.

Each review can include:

• The page URL and title you pinned
• Screenshots of the current viewport and a crop around the pin
• Voice audio and any transcript we could produce
• Notes you type, and the pin’s position, size, and scroll offset
• Locator hints (role, name, test id, css) and, when the page exposes them, component names and source file paths

Reviews and media live on our host (Postgres for the review, object storage for files). The demo review is public on purpose.

Review URLs are unlisted, not private. Anyone who has the link can open the player, hear the audio, and see the screenshots. Do not pin secrets, personal data, or anything you would not send in an email.

The extension attaches a debugger to the tab you pin so it can highlight a control and take a screenshot. That can briefly show Chrome’s debugging banner and may reload the tab the first time.

If you record, the extension uses the microphone in the capture window. Speech-to-text, when it works, runs in the browser. We do not send that audio to a third-party speech API.

Send only works if a companion process is running on your computer. A page on this site cannot talk to that process by itself from HTTPS, so we may use the Pin extension or a local window to reach it.

The companion downloads the review (notes, screenshots, audio) to a folder on your machine and launches or reuses your agent CLI (Claude, Grok, Codex, or whatever you chose). That packet then lives in the agent’s context. We do not run the agent, and we do not see what it does after launch.

We do not sell your reviews. We do not use them for ads. We do not train a model on your audio or screenshots. There is no payment information because nothing is billed yet.

Login uses a session cookie. Hosts (Vercel and the database) may keep ordinary request logs: time, path, status, and rough location. Error reports can include a review id. We are not running extra analytics trackers on the site.

Reviews stay until we delete them or shut the service down. This is an early product. If you want something removed, say so through the account you used to sign in.

If this policy changes in a way that matters, we will update the date on this page.