Privacy Policy

Our approach Pinbun, LLC operates Pinbun in Washington State, USA. We collect information needed to run discovery, private bookmarking, publishing, and moderation. We do not sell personal information, run third-party advertising trackers, or use invasive device fingerprinting. Contact [email protected] about privacy or account access. Information we process An account includes your email, handle, display name, password hash, optional biography/avatar, verification status, and security settings. We store the pins and comments you publish, bundles and saves you organize, private notes and links, interests, follows, blocks, preferences, and policy acceptance timestamps. Passwords are hashed; TOTP secrets are encrypted and recovery codes are stored as hashes. We do not make email addresses, security data, private bundles, or reporter identities public. What other people can see Public profiles, approved pins, public bundles, and public comments can be viewed by guests. Public engagement counts include eligible hearts and distinct users with public saves. Private saves and notes never appear in public counts or creator analytics. Blocking stops authenticated interactions and notifications between the accounts; it cannot prevent someone from viewing public content while logged out. Optional measurement Account settings let you choose whether to contribute to creator analytics. This is off by default. We measure feed impressions, detail views, and website visits separately, using a rotating daily identifier for consenting signed-in accounts. Raw events retain a restricted account reference so you can export your own activity and account deletion can erase it. We omit anonymous analytics. Measurements are approximate, exclude creator self-activity and obvious automated requests where practical, and are not claims of unique-person counts. Creators receive aggregates, never individual viewer lists or private collection information. You can withdraw consent at any time to stop future collection. Operational data and service providers Server sessions and security logs can include IP addresses, browser information, timestamps, and error context needed to protect accounts. We avoid logging passwords, cookies, reset tokens, or sensitive request bodies. Hosting, email, and storage providers process information only as needed to provide those services. We may disclose information where legally required, to protect people and the service, or to investigate abuse. Reports and moderation evidence are restricted to appropriate staff. Retention Inactive browser sessions expire after two hours and are removed by scheduled cleanup. Password reset credentials expire after 30 minutes. Export downloads expire after 24 hours. Operational logs, completed work records, failed jobs, metadata imports, and raw analytics normally remain for up to 30 days; notifications and aggregate analytics for up to 90 days. Unreferenced uploads are eligible for cleanup after seven days. Resolved moderation evidence and security audit records can remain for up to two years to support appeals and abuse prevention. Active account data remains until removed or the account is deleted. Cleanup is processed in bounded batches; an operational backlog may delay physical removal. Legal holds may require longer retention of relevant records. Your choices and requests You can edit your profile, remove saves, change bundle visibility, manage interests and email preferences, revoke sessions, download your account data, and request deletion in Settings. Exports include your account records and private organization data. Original images can be downloaded separately while signed in after reauthentication. Account deletion stops public distribution and queues removal from primary storage. Security and moderation records may be retained for the periods above. Encrypted backups expire within 30 days under our deployment retention policy; deletion tombstones are reapplied before restoring a backup to public service. Previously downloaded public content and independently operated destination websites are outside Pinbun’s deletion controls. Children and policy changes Pinbun is for people age 13 and older. If you believe we have collected account information from a child under 13, contact support so we can investigate and remove it as appropriate. We publish dated policy versions and describe material changes through the service. Contact support to exercise applicable privacy rights or ask for help with a request. Save request receipts used to prevent duplicate submissions expire after seven days. They contain a request identifier and hash, rather than another copy of your private note.