Skip to content
Start a review

Privacy

What Pinfinch stores, and how to remove it

Pinfinch is a feedback tool. It stores the feedback people leave on a mockup, and nothing else of note. This page says what that is, how long it is kept and how to have it deleted. It is part of the Terms of Use. Last updated October 28, 2026.

What is stored

  • The mockup. The HTML file uploaded for review, and the review name.
  • Feedback. The name you type, your comments and replies, what you marked on the page and where, and any screenshot you choose to attach.
  • Basic device details. With each comment: browser, operating system, screen size and window size, so the problem can be reproduced.
  • On your own device. Your name, a random reviewer ID and your consent choice are kept in your browser so you can edit or delete your own comments. Clearing your browser data removes them.
  • Accounts, for people who create reviews. An email, a name, and a one way scrambled version of the password (the password itself is never stored). One essential cookie keeps you signed in.

What is not stored

  • Reviewers give no email address and need no account or password.
  • No advertising, analytics or tracking scripts run on Pinfinch.
  • Your network address is used for a few minutes to slow down abuse. It is not saved with your comments.

How long it is kept

A review link lasts 90 days. After that the link stops working and its comments are removed. Uploaded files are deleted when a review is deleted, and expired files are cleared out on a regular schedule.

Deleting what you left

  • Reviewers can delete their own comments at any time with the Delete button on the comment. Its screenshot goes with it.
  • People with an account can delete any of their own reviews from their projects. That removes the mockup file, every comment, every screenshot and the link itself. Reviews are private to the account that made them.
  • For anything else, or to ask what is held about you, email legal@pinfinch.com.

Who handles the data

The operator of this service decides what is collected and why. The data is stored with two service providers acting on the operator's behalf: Vercel for hosting and file storage, and Upstash for the database. Mockups open on a separate address with their own restrictions, so a mockup cannot read your comments or your account.