Your data and privacy

What PinMarks collects, where it is kept, how to delete it and what the widget can see.

Updated October 2026

What is collected

• Your account and workspace details, and the projects and settings you create.
• Feedback reports: the screenshot and annotations, the page URL, browser, OS and screen size, console errors, and a name and email if the reporter provides one.
• Optional extras you switch on: failed network requests, session replay, video and custom metadata.
• Integration access tokens needed to send issues to your tools.

The widget only sends data when a person submits a report. The browser extension captures a screenshot only when you click it, with no background capture or browsing history.

Protecting sensitive data

• Blur tool in the annotation toolbar to hide anything before sending.
• Network capture: hidden keys (default username, password, token) and skipped domains keep secrets out of logs.
• Session replay masks input values, and password fields are always hidden. On the Agency plan, add .sf-exclude, .sf-mask or .sf-unmask to elements for finer control.
• Allowed domains make sure only your sites can send feedback to a project.

Deleting data

• Project: delete it from the projects list to remove its feedback, screenshots and settings.
• Workspace: Settings → General → Delete workspace removes everything in it.
• Your account: Settings → Profile → Delete account removes your sign-in. Comments and feedback you wrote stay with the workspace. For a full erasure request, email support@pinmarks.io.

Privacy policy

Retention, hosting providers and your rights are described in the privacy policy. Questions? Email hello@pinmarks.io.