pinning.
— Legal

Cookies.

What we store on your device. Spoiler: almost nothing.

Last updated · August 11, 2026

The short version: we use one essential auth cookie. Our analytics is first-party and opt-in — nothing is measured until you accept. No advertising, no third-party trackers, no cross-site cookies, and we never store your raw IP address.

What is a cookie?

A cookie is a small text file stored on your device by a website. Cookies are often used to keep you logged in, remember preferences, or track behavior across sites.

Under the EU ePrivacy Directive and § 25 TDDDG, non-essential cookies require your explicit consent before being placed. Essential cookies do not.

Cookies we use

Essential — no consent required

  • sb-access-token / sb-refresh-token — Supabase Auth session. HttpOnly, Secure, SameSite=Lax. Expires when you log out or after 7 days of inactivity.
  • pinning-consent — remembers your cookie preferences. 12 months.

Functional — only with consent

  • pinning-theme — saves your light/dark preference (default: dark). We currently store this in localStorage, not a cookie.

Analytics — first-party, opt-in

We run our own first-party analytics pixel — no third-party analytics provider. It stays switched off until you accept it in the consent banner (§ 25 TDDDG / ePrivacy: opt-in). When enabled, it records anonymous page views and clicks so we can improve the product.

  • pnng_consent (localStorage) — your analytics choice. Essential to honor your decision; stored until you change or clear it.
  • pnng_sid (sessionStorage) — a random per-session id, only set after you accept. Cleared when you close the tab.
  • Country & unique counts — derived server-side from edge headers and a daily, salted one-way hash. We do not store your raw IP, and the hash rotates every day, so it can't track you across days or sites.

Email open tracking

Transactional emails (e.g. a purchase confirmation) may contain a 1×1 pixel so we can see whether a message was opened and ensure delivery is working. You can disable remote images in your email client to block it.

Marketing

We don't use marketing or advertising cookies. We have no advertising partners.

In the iOS app

The app sets no cookies. It stores a few things on the device itself, which § 25 TDDDG treats the same way a cookie is treated:

  • Your login session and your theme choice — strictly necessary to provide the service you asked for, so no consent is required (§ 25 (2) no. 2 TDDDG).
  • Your answer to the usage-data question — stored so we do not ask again and so the answer survives a restart. Necessary to honour your own decision.

Beyond that, the app sends product-usage events and crash reports to PostHog (EU region, Frankfurt) — but only after you actively enable Settings → Privacy → Share usage data. It is off on install, an unanswered question counts as no, and switching it off stops transmission immediately. There are no advertising identifiers, no IDFA, and no cross-app tracking, so the app shows no App Tracking Transparency prompt. What exactly is sent is listed in the Privacy Policy, § 3.

Third-party services

Some pages load resources from third parties:

  • Stripe — only on account billing pages for subscriptions taken out before web checkout closed. Plans are now bought in the app, so /pricing loads no payment scripts at all.
  • Google Fonts — fonts loaded from Vercel CDN (self-hosted), no requests to Google

Managing your preferences

Change or withdraw your analytics consent at any time — it takes effect immediately:

Current: not set

You can also clear cookies and site data from your browser. Doing so will log you out and reset preferences.

Contact

Questions: privacy@pinning.info