← Back to PinGrid

Privacy Policy

How PinGrid handles your data — short version, almost nothing.

Last updated: 28 April 2026 (rev. 2)

Introduction

PinGrid is a Chrome extension built and operated by JMHB LTD (“we”, “us”, “our”), a company registered in the United Kingdom. This policy explains what data PinGrid handles and how. We’ve kept it short because PinGrid does very little with your data — almost everything stays on your device.

This policy applies to the PinGrid Chrome extension, the PinGrid website at pingrid.jmhb.dev, and the PinGrid Premium purchase flow.

Who we are (data controller)

Company
JMHB LTD (registered in Scotland, Company No. SC802251)

JMHB LTD is the data controller for the limited personal data described below.

What data PinGrid stores (and where)

The PinGrid extension stores the following on your device using the chrome.storage.local API built into your browser. None of this is transmitted to us:

  • URLs and titles of pages you have chosen to pin
  • Favicons of those pages
  • Timestamps of when each pin was added
  • Your Premium licence key, if you have purchased Premium
  • Your local UI preferences (e.g. whether you have dismissed an onboarding banner)

This data lives in your browser’s storage. We have no server-side copy. We cannot see your pins. If you uninstall PinGrid, Chrome removes this data automatically.

The single exception to local-only storage is when you activate Premium: your licence key and an anonymous device identifier are sent to our licence API at api.pingrid.jmhb.dev to verify your purchase and track device activations against the per-licence limit. This is the only outbound network request the extension makes, and it only happens when you click “Activate” or during occasional background re-validation (at most once per 24 hours).

What we do not collect

PinGrid does not collect, transmit, or have access to:

  • Personally identifiable information (your name, email, postal address) — except as described in section 6 (Premium purchases) and section 7 (Support)
  • Browsing history beyond the specific pages you explicitly choose to pin
  • Analytics, usage telemetry, or crash reports
  • Cookies or persistent tracking identifiers (the extension does not run on websites)
  • Your IP address
  • Your geographic location
  • Device identifiers, hardware information, or system fingerprints

The extension contains no third-party analytics SDKs, no advertising trackers, and no telemetry of any kind. We do not load any code from a remote server at runtime — every line of code that runs is included in the extension package you download from the Chrome Web Store.

Permissions the extension uses, and why

PinGrid requests the minimum permissions needed to function. We use them only for the purposes described:

  • tabs — to read the active tab’s URL, title, and favicon when you click the “+” button to pin it. We do not read tabs in the background.
  • storage — to save your pins locally on your device.
  • contextMenus — to add “Add page to PinGrid” and “Add link to PinGrid” entries to your right-click menu.
  • sidePanel — to open the side panel when you press Alt+P or click the toolbar icon.
  • windows — to identify which browser window is active when opening the side panel.

We comply with the Chrome Web Store’s Limited Use policy. The data accessed via these permissions is used solely to provide the user-facing features described on our landing page, and is never sold, transferred, or used for advertising, profiling, or any unrelated purpose.

Premium purchases

When you buy PinGrid Premium, payment is processed by Stripe, a leading payment processor. We never see or store your card details. Stripe handles your payment data under their own privacy policy: stripe.com/privacy.

What we receive from Stripe at checkout:

  • The email address you used at checkout (to send your licence key)
  • Your name (used to personalise the licence-key email)
  • Your billing address (used by Stripe Tax to calculate the correct VAT, and required by HMRC as evidence of place of supply for digital services)
  • A purchase record (date, amount, tax amount, transaction ID)

What we store on our own server:

  • Your licence key
  • Your customer email address
  • Your name
  • Your billing country (the country code only — not the full address; Stripe holds the full address for the legally-required period)
  • The amount paid and tax collected (in pence)
  • The activations of your licence (which devices have activated it, identified by an anonymous device ID)

We use this only to:

  • Deliver your licence key
  • Validate licence activations from the extension
  • Provide support relating to your purchase
  • Process refund requests
  • Comply with our legal obligations (tax records under HMRC requirements)

Lawful basis (UK GDPR Article 6): performance of a contract (Article 6(1)(b)) for licence delivery and activation; legal obligation (Article 6(1)(c)) for tax record retention.

We do not use purchase data for marketing. Tax records are kept for 6 years per HMRC. Other purchase records are kept for 24 months for support purposes.

Support requests

If you email us for support, we’ll see your email address and whatever you choose to share. We use this only to answer your question.

Lawful basis: legitimate interests (UK GDPR Article 6(1)(f)) — providing customer support to users of our product. You can object at any time by not contacting us.

Retention: support emails are kept for up to 24 months for reference, then deleted.

Third parties

PinGrid uses the following third parties. Each is chosen to minimise data sharing:

  • Stripe (USA / Ireland) — payment processing. Card details go directly to Stripe; we never see them.
  • Resend (USA) — sends your licence key email and any support correspondence. They process the email address you provided at checkout and the email content.
  • Akamai Technologies (Linode) — hosts our website (pingrid.jmhb.dev) and licence API server (api.pingrid.jmhb.dev). Standard server logs (IP address, request timestamp, user agent) may be generated by traffic; we do not analyse or profile these.
  • Google (Chrome Web Store) — distribution channel for the extension itself. Google’s privacy policy governs your interaction with the store: policies.google.com/privacy.

Some providers process data outside the UK. Where this happens, transfers are protected by appropriate safeguards including the UK International Data Transfer Addendum or equivalent Standard Contractual Clauses.

The PinGrid extension itself only contacts our own licence API (api.pingrid.jmhb.dev) and never shares your pinned page data with any third party.

Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request erasure of your data (“right to be forgotten”)
  • Object to or restrict processing
  • Data portability (receive your data in a structured format)
  • Withdraw consent at any time, where consent is the lawful basis
  • Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113

Because PinGrid stores almost everything locally on your device, the simplest way to exercise most of these rights is to remove the data yourself: clear PinGrid’s storage in Chrome’s extension settings, or uninstall the extension. For data we do hold (purchase records, support emails), email us and we’ll respond within 30 days.

Children

PinGrid is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has provided personal data to us, please contact us and we will delete it.

Security

We take reasonable technical and organisational measures to protect the limited personal data we hold. Our website and licence API are served over HTTPS. Card data is handled by Stripe under their security practices. Support and transactional email is handled by Resend with standard encryption-in-transit and at-rest. No method of transmission or storage is 100% secure, but we keep what we hold to a minimum.

Changes to this policy

If we update this policy, we’ll change the “Last updated” date at the top. Material changes will also be flagged on the PinGrid landing page for at least 30 days.

Contact

Questions about this policy, or to exercise your rights? Email [email protected] and we'll respond within 30 days.