Privacy Policy

Last updated: June 8, 2026

Pinstack is a personal RSS/Atom reader. It stores only what it needs to run your account. This policy describes what Google user data Pinstack accesses, and how that data is used, stored, and shared.

Google User Data We Access

Pinstack uses Google Sign-In for authentication. When you sign in, you grant Pinstack the standard sign-in scopes openid, email, and profile. From these, Pinstack receives:

• Your Google account email address.
• Your basic profile (your display name).
• A Google account identifier (the OpenID sub claim) that uniquely and stably identifies your account.

Pinstack does not request or access Gmail, Drive, Contacts, Calendar, photos, or any other Google service or sensitive data. No advertising or analytics scopes are requested.

How We Use Google User Data

Pinstack uses the Google user data above solely to:

• Authenticate you and sign you in to your account.
• Associate your feeds and reading data with your account so that only you can see your own content.
• Display your name and email in the app interface.

Pinstack does not use Google user data for advertising, profiling, resale, or training artificial-intelligence or machine-learning models. No human reads your Google user data except as strictly necessary to provide support you request, maintain security, or comply with applicable law.

What We Store

• Account data derived from Google Sign-In: your email address, display name, and Google account identifier (google_sub).
• Feeds: URLs and metadata you add; items cached for your account.
• Session cookie: used to keep you signed in; no cross-site tracking.
• Logs: minimal server logs for debugging and uptime checks.

Pinstack does not store passwords, Google OAuth access tokens, or refresh tokens, and runs no analytics beacons.

How We Store and Protect Data

Your data is held in a private, server-side database scoped to your account; another user cannot access your data. The session cookie is signed and marked httpOnly and sameSite=lax (and secure in production), and expires after 7 days.

How We Share Data

Pinstack does not sell your Google user data and does not share it with third parties. The only parties involved are Google (your sign-in provider) and the infrastructure provider that hosts Pinstack.

Pinstack's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data Retention and Deletion

Account and feed data remain until you delete them or your account is removed. Logs are kept briefly for troubleshooting. To delete your account and all associated Google-derived data, email insanethoughts@live.com.

Your Choices

You can remove feeds at any time. You can revoke Pinstack's access to your Google account at myaccount.google.com/permissions. To request full deletion of your data, email insanethoughts@live.com.

Changes

Privacy details may change; continued use means you accept the updates.

Contact

Questions about this policy: insanethoughts@live.com.