Privacy Policy: Pinboard Bookmark Enhanced

Last updated: 2026-08-18

Summary

Pinboard Bookmark Enhanced is local-first and bring-your-own-key. It has no developer servers, no analytics, no tracking, and no telemetry; the developer never receives your data. The extension uses Pinboard for its core bookmark features and contacts other services only as described below. Bookmark-status checks and offline-save retries can run automatically; separately enabled features such as Wayback archiving and key-points skim can also make automatic requests.

Google Drive vocabulary sync remains off until you explicitly connect it on a device. Once connected, it syncs only the current Pinboard account’s vocabulary through the extension’s private Google Drive application-data folder. It does not sync settings, credentials, reader highlights, or dictionary packs.

Data storage

Extension settings, caches, and temporary state are stored locally by default. Bookmarking and the configured features described under Network requests can transmit the specific data needed for those features. You can optionally enable settings sync (off by default); ordinary settings (not saved bookmarks or page content) are then synced across your devices through Chrome’s built-in account sync.

Settings sync is implemented with Chrome’s chrome.storage.sync. Whether ordinary settings sync is enabled remains a per-device choice. The separate API-key-sync preference is an account-wide marker, but credentials are read from or written to Chrome Sync only on devices where ordinary settings sync is also enabled. New users start with credential sync off. During upgrade, if the account-wide marker is missing but Chrome Sync already contains a non-empty credential/export-target token, or the old device-local credential-sync preference was on, the marker is initialized on to preserve that existing opt-in and avoid credential loss; otherwise it is initialized off. API keys, tokens, passwords, configured Webhook URLs, and other export-target credentials stay local unless both settings sync and this account-wide credential option are enabled. These values are obfuscated at rest (not cryptographically encrypted). Public service requests use HTTPS; configured AI and Webhook endpoints may use plain HTTP only for the literal loopback hosts listed under Network requests. The extension has no developer server; automatic requests are limited to the core and enabled behaviors documented below.

While credential sync is enabled, each participating device also retains its last observed cloud credential snapshot locally. If another device turns credential sync off and removes the cloud copy, that local snapshot remains available. A device that was offline during a credential change can retain only the older snapshot it last received.

New offline-queue records never store a Pinboard API token. They store the bookmark fields listed above plus the Pinboard username parsed from the token as a non-secret account binding. Legacy queued records are rewritten to that format and their stored token field is removed. Retry always requires the currently configured token for the same username; logout or an account switch leaves the item queued and sends no request with an old credential.

To prevent one Pinboard account from seeing another account’s local state, account-derived records and caches carry the Pinboard username parsed from the token as a non-secret plaintext owner. This applies to the offline queue, tag caches and recent-tag state, Batch progress, tag-cleanup state, Markdown-preview handoffs, the vocabulary book, and other account-specific local state. Account-scoped AI cache keys (tags, summaries, translations, extracted translation glossaries, remembered translation views, and contextual dictionary glosses) include that username owner in the IndexedDB key. These owner bindings do not contain the API token and do not create an additional network request.

Manual backups are plaintext schema v3 JSON files you explicitly export. They contain settings and themes. You can separately include reader highlights and notes, which contain page URLs, page titles, selected text, note text, highlight colors, and timestamps. You can also include the current Pinboard account’s vocabulary records, including the vocabulary fields listed in the table above. OAuth data, Drive account data, version vectors, outbox, tombstones, and pending batches are never included.

Credentials are excluded unless you tick Include API keys and tokens in backups, which is off by default. With it ticked, the export writes your Pinboard token, every AI provider key, and the Jina, Wayback, AnkiConnect, Eudic, GitHub and Notion tokens and the Webhook authorization value or capability URL into the file in plain text, marks the file with credentials in its name, and records the fact in the file’s metadata. Such a file is equivalent to a password file: anyone who opens it can use those credentials. On import, credentials are a separate section that stays unticked even when the file contains them, so restoring settings never silently overwrites the keys already working on that device.

Chrome Web Store data categories

The Chrome Web Store privacy form uses standardized data categories. To keep the store listing consistent with this policy, this extension discloses that it handles the following categories:

The extension does not collect health information, financial/payment information, location, personal communications as a separate category, or user activity for analytics/tracking. It has no developer-operated analytics, telemetry, advertising, or profiling.

Network requests

The extension uses the required Pinboard hosts for its core bookmark features. Configured AI, Jina, Wayback, Gist, Webhook, and Notion destinations, together with selected Batch source origins, require an optional grant for the exact current origin. The Google API grant for Google Drive vocabulary sync follows the same direct-action rule described in item 16. Permission prompts are initiated only from a direct user action; automatic and background feature paths only check an existing grant and skip or fail safely when it is absent. Remote images retained in Markdown preview are normal browser subresource requests and do not use an extension host-permission grant; they are disclosed separately below.

1. Pinboard API (api.pinboard.in): to save, retrieve, and manage your bookmarks, authenticated with your Pinboard API token. The tag-cleanup tool, when you run it, downloads your full bookmark/tag list (posts/all, tags/get) and re-saves affected bookmarks to rename or merge tags, all to and from your own Pinboard account. The extension also checks whether the current page is already bookmarked as you navigate, sending the active tab’s URL to the Pinboard API to set the toolbar icon state.

2. Pinboard website (pinboard.in): (a) a content script applies your chosen theme CSS and tag-sort tweaks on pinboard.in pages; no data is extracted or transmitted. (b) Save Tab Set POSTs the open tabs’ titles and URLs to pinboard.in/tabs/save/ using your existing pinboard.in login session cookie (not the API token), then opens pinboard.in/tabs/show/ for you to confirm.

3. AI provider APIs: the page title, URL, and extracted article text are sent to the provider you chose to generate AI tags, summaries, translations, Ask-the-page answers, selection explanations/translations, or batch-save results. Tag/summary requests send roughly the first 8 KB of extracted text. AI-tag requests can also include up to 50 existing Pinboard tag names so the provider can prefer reuse. If you put `` in a custom tag or summary prompt, the current bookmark description or notes are included. Full-text Translate sends the translatable article across multiple batches; it is not reduced to one sampled context window. Translate does not create a summary, but when a summary for the same Pinboard account is already cached locally, that summary is included as context in each translation batch. The extension operates no translation snapshot or sharing service: translations stay on your device and with the AI provider you chose, unless you explicitly send them somewhere with a Send-to export action (items 6, 7, 8, 18, and 19). Ask-the-page and the opt-in key-points skim select article context within their token budgets. If you enable AI for Quick Save, Read Later, or Batch Save, the corresponding save action can initiate the configured AI work. If you separately opt in to key-points skim, opening Markdown preview can generate it automatically on a cache miss. Deep Analysis (AI) in tag governance sends tag names (and, when truncated, the number of omitted lower-frequency tags), not bookmark page content or per-tag use counts. Supported providers: OpenAI, Anthropic, Google Gemini, DeepSeek, Qwen, MiniMax, OpenRouter, Groq, Mistral, Cohere, SiliconFlow, Zhipu, Moonshot, GitHub Models, a local Ollama instance, or a Custom OpenAI-compatible endpoint. The first direct use requests only that provider’s exact origin; later automatic use proceeds only while that exact grant remains active.

4. Jina Reader (r.jina.ai, optional): when you choose the Jina content source, the page URL is sent to Jina to fetch a cleaner reader-mode rendering for AI processing or Markdown export. If you configured a Jina API key, it is sent on a cache miss or refresh as a Bearer authorization value. Disabled by default. A cache hit stays local; a network cache miss requires an exact https://r.jina.ai grant.

5. Wayback Machine (web.archive.org, optional, opt-in): when you enable Wayback archiving, the URL of a page you save can be submitted automatically to the Internet Archive to create a public snapshot. If you configured Wayback S3 access credentials, the access key and secret are sent in the request’s authorization header. It is off by default and requires an exact https://web.archive.org grant. Background saves only check that grant; if it is absent, the archive is not submitted and the permission-required outcome is logged locally.

6. Obsidian (local app, optional): the Send to Obsidian action hands the converted Markdown of the current page to your local Obsidian desktop app via the obsidian:// protocol or the system clipboard. This stays on your device; nothing is sent over the network.

7. GitHub Gist (api.github.com, optional; inactive until you configure it): the Send to Gist action uploads the converted Markdown of the current page (including its metadata frontmatter) as a secret gist on your own GitHub account, authenticated with a personal access token you provide. The action requests only the exact https://api.github.com origin.

8. Webhook (a URL you configure, optional; inactive until you configure it): the Send to Webhook action POSTs a JSON payload to the endpoint you entered (e.g. Readwise), with an Authorization header value you provide. The payload contains the page’s title, URL, save date, tags, and converted Markdown; when extended export metadata is enabled (default on), it also includes the page’s author, original publish date, site name, cover-image URL, and word count. The action requests only that endpoint’s exact origin. An unsafe endpoint is blocked rather than warned-and-sent.

9. Selected Batch Save sites (local extraction access, not a data destination): when AI is enabled for Batch Save, Chrome asks for the exact origins of the selected HTTP/S tabs so the extension can extract their page text locally, together with the exact current AI-provider origin. The confirmation view lists every requested origin. The extension does not request the all-sites wildcard at runtime; extracted content is sent only to the selected AI provider as described above.

10. Remote image hosts in Markdown preview: sanitized Markdown can retain remote image URLs. When the preview renders those images, the browser requests them directly from the original site or image/CDN host without a separate extension host-permission prompt. Every retained image is forced to referrerpolicy="no-referrer", so the referring article/preview URL is not sent in the Referer header. The image host still receives the requested image URL and ordinary connection/request metadata such as the user’s IP address and browser headers; cookies are included only when permitted by Chrome’s cookie and third-party-cookie policies.

11. Embed (offline) image export in Markdown preview (image hosts referenced by the exported document, optional): this is a separate mechanism from the ordinary <img> rendering described above. Choosing the Embed (offline) image policy for a Markdown/HTML/EPUB download makes the extension page itself fetch each remote image directly from its own host (credentials: "omit") and convert it to a data URI (or, for EPUB, bundle it as a file inside the book) so the downloaded file renders offline. This only runs when you click Download with that policy selected, and requires a one-time optional host-permission grant for the exact image origins found in the document; declining leaves those images as ordinary remote links in the export instead of embedding them. Images that fail this plain fetch (typically hosts that reject requests without a Referer header) are retried once behind the temporary Referer rule described in item 12, within the same download-size budget. No image data passes through any intermediary.

12. Fix images blocked by hotlink protection in Markdown preview (image hosts, optional): some sites reject any image request that carries no Referer header, and an extension page can only send referrerless requests, so those images fail to load in the preview. When that happens, the preview shows a count and a Fix button. Clicking it asks for a one-time optional host-permission grant for the exact failed image origins, then re-fetches only those images (credentials: "omit") while a temporary declarativeNetRequest session rule (scoped to those image domains, to the fetch request type, and to that one preview tab) sets the Referer header to the article page’s origin (never the full article URL or its query). The rule is removed as soon as the fetch run finishes, and fixed images are displayed as inline data URIs for that page view only; nothing is written to storage. For image origins you have already granted, later previews re-apply this fix automatically; the automatic path only checks the existing grant (permissions.contains) and never prompts. Declining the permission leaves the images as broken placeholders.

13. Free Dictionary API (freedictionaryapi.com, optional): when you use the Dictionary lookup in Markdown preview and grant an exact https://freedictionaryapi.com origin, the selected word and its language code are sent to fetch Wiktionary-based definitions. The same lookup can also be started from the Notes & Vocabulary page: clicking Look up again on a saved word, or submitting any word in the page’s own lookup box, sends that word and its language code to the same endpoint; opening the page sends nothing on its own. The lookup is never contacted automatically or in the background.

14. AnkiConnect (http://127.0.0.1:<port>, local loopback, port configurable in settings with 8765 as the default, optional; inactive until you click Send all to Anki): the Send all to Anki action sends every vocabulary book entry belonging to the current Pinboard account, including its term, reading, definition, contexts, source, and license text, to a locally running Anki instance through the AnkiConnect add-on. It uses an API key you provide if AnkiConnect requires one. The request always targets the loopback address 127.0.0.1 (only the port is configurable); it never reaches the public internet or the developer. The action requests only that exact origin and runs only when you click Send all to Anki.

15. Eudic OpenAPI (api.frdic.com, optional; inactive until you click Send all supported words to Eudic): the Send all supported words to Eudic action checks every vocabulary book entry belonging to the current Pinboard account. It sends the term text and language code of entries in a supported language (English, French, German, or Spanish) to your Eudic account’s default study list for that language, authenticated with an OpenAPI authorization value you provide. Entries in unsupported languages are skipped and not sent. The action requests only that exact origin and runs only when you click Send all supported words to Eudic.

16. Google Drive API (www.googleapis.com, optional): clicking Connect Google Drive is the only action that can request the optional Chrome identity permission and exact https://www.googleapis.com origin. The extension uses the drive.appdata scope to store immutable vocabulary batches in its private appDataFolder, not in your visible Drive files. Batches contain plaintext words, definitions, IPA, groups, notes, source URLs, article titles, context excerpts, source-license data, and timestamps. They also contain an owner hash, a device identifier, record keys, version vectors, dots, and deletion markers used for convergence; the plaintext Pinboard username and all credentials are excluded. The extension calls Drive about.get to identify the connected account and stores its permission ID, email address, and display name locally with cursors, pending work, errors, and retry state. After a device is connected, pending local changes can schedule a sync after 30 seconds and a periodic check can run every 15 minutes. These automatic runs only check existing permissions and never open an OAuth prompt. Disconnect this device removes the cached OAuth token and optional grants but does not delete local vocabulary, local convergence state, or remote appDataFolder batches.

17. Browser speech synthesis for pronunciation (no extension permission involved): the pronunciation button in the Dictionary lookup uses the browser’s built-in Web Speech API. The extension prefers a voice the browser reports as running on your device, so in the common case the word never leaves your computer. Some voices are network-backed instead; on desktop Chrome these are the built-in “Google language” voices, which synthesize speech on Google’s servers. If your browser offers no on-device voice for the detected language, or no language was detected, the browser can fall back to one of those network voices, and the text being spoken (the selected word or phrase, truncated to 200 characters, never the article) is sent to that speech service by Chrome itself. This path uses no extension host permission, so there is no permission prompt to accept or decline; which voices exist and which is used by default are controlled by your operating system and your Chrome settings.

18. Notion (api.notion.com, optional; inactive until you configure it): the Send to Notion action creates a new page under a parent page you choose in your own Notion workspace, authenticated with an internal integration token you provide. The request carries the page’s title, source URL, tags, and converted Markdown as the new page’s content. The action requests only the exact https://api.notion.com origin.

19. NotebookLM (no network access; optional): the Send to NotebookLM action copies the converted Markdown to your system clipboard and opens notebooklm.google.com in a new tab. The extension itself sends nothing over the network and requests no host permission for it; the content reaches Google only if you paste it there yourself.

20. YouTube video and subtitles in Markdown preview (www.youtube.com, optional; only for previews of YouTube video pages): opening the preview of a YouTube video page automatically requests a poster thumbnail from https://i.ytimg.com/vi/<id>/hqdefault.jpg for the entry card; this is an ordinary <img> request with referrerpolicy="no-referrer" set, and, as with other retained preview images (item 10), cookies are included only when Chrome’s cookie and third-party-cookie policies would otherwise send them to that host. The first time you use this on a video page, an Enable subtitles & load video button asks once for the exact https://www.youtube.com origin; nothing is requested before that click. Once that grant stands, opening the preview of a YouTube video page runs the caption capture automatically (the extension only checks the existing grant, it never re-prompts), because the transcript now IS the page’s article rather than an optional panel. With that grant, if a www.youtube.com tab is open in your browser (preferring the tab this preview came from), the video’s ordinary watch page and the selected subtitle track are read inside that tab, with the tab’s own session: the same requests that page could make itself, sending nothing beyond what your own YouTube session already sends. When no YouTube tab is open, the extension falls back to requesting the same watch page and track text directly from the reader page; only this fallback is governed by Send YouTube login cookies with subtitle requests (on by default, because an anonymous fallback request is more likely to be treated as automated traffic and refused outright; turning it off makes the fallback cookieless, credentials: "omit", at the cost of finding subtitles less often). YouTube restricts caption access for some videos, and those simply report no subtitles. Clicking the entry card also loads the player, embedded through a small page published on this project’s own GitHub Pages site (pine2d.github.io), which exists only because Chrome sends no Referer from extension frames and YouTube’s player refuses to load without one; that relay page builds the player through YouTube’s own IFrame API, loading YouTube’s official player script (iframe_api, which loads www-widgetapi.js in turn) only on the Pages origin and never inside the extension. It forwards play and seek commands from the reader, reads back the player’s public playback position and state through that same official API, and reports them only to the reader page that first messaged it, an origin captured from and checked against that first message; it stores nothing. It uses the ordinary YouTube domain rather than the privacy-enhanced youtube-nocookie.com one because the latter is a separate domain that your login cookies never reach, which made YouTube treat the embedded player as automated traffic and refuse to play. The tradeoff is the cookies the ordinary domain sets, the same ones any YouTube embed on any website sets. Loading the relay needs no host-permission grant, since it is a frame rather than a fetch, so the player still loads even if you decline the subtitle-origin prompt. An always-present open on YouTube link next to the player opens the ordinary youtube.com/watch page in a new tab, as a fallback for when the relay cannot load. With the grant standing, opening such a preview also loads the embedded player automatically. Nothing is sent for non-YouTube pages, and revoking the origin in Chrome’s site settings returns the page to the ask-first state.

21. Bilibili subtitles in Markdown preview (api.bilibili.com, optional; only for previews of bilibili video pages): the first Enable subtitles & load video click asks once for the exact https://api.bilibili.com origin; once that grant stands, opening the preview of a bilibili video page automatically calls bilibili’s view, nav, and WBI-signed player endpoints to list and fetch subtitle tracks. Because bilibili only returns subtitles to a logged-in account, these three requests are sent with your bilibili login cookies (credentials: "include", first-party to bilibili’s own API, the same session your browser already holds); the subtitle text file itself is fetched from bilibili’s CDN without cookies. Signed in, this reads your session’s subtitle access; signed out, bilibili returns an empty list and the panel shows a sign-in hint. The embedded player loads from player.bilibili.com inside a frame, automatically once the grant stands (the transcript is the page’s article). Nothing is sent for non-bilibili pages, and revoking the origin returns the page to the ask-first state.

For configured AI and Webhook destinations, HTTPS is required. Plain HTTP is accepted only for the literal loopback hosts localhost, 127.0.0.1, and [::1] (with an optional port). Public or LAN HTTP hosts, alternate loopback spellings, wildcard hosts, and URLs containing embedded credentials are blocked before any request. The configuration is retained so you can correct it; permission denial or revocation likewise preserves keys and settings.

Page content, URLs, credentials, and remote-image requests are transmitted only as described above, and never to the developer.

Permissions

Optional grants are requested from a direct user action and remain under Chrome’s permission controls. Automatic feature paths that require an optional grant use permissions.contains only and never prompt. On upgrade from a legacy version that may have retained an all-sites grant, the extension performs a one-time removal of that wildcard grant. This can also clear matching old exact grants, but configurations are preserved and the next direct use can restore only the exact origin needed. On Chrome 142 and later, granting the AnkiConnect loopback origin can also trigger a separate Local Network Access (LNA) prompt from Chrome itself before the request reaches 127.0.0.1; declining that prompt leaves Send all to Anki unavailable without affecting any other permission.

Third-party services

The extension communicates with the following services or destinations for the corresponding behavior:

• Chrome Sync / your Google Account: receives ordinary settings from devices where settings sync is enabled; participating devices include credentials only when the separate account-wide API-key sync option is also enabled
• Google Drive: after an explicit connection on each device, receives the current Pinboard account’s vocabulary plus owner hashes, device identifiers, record keys, version vectors, dots, and deletion markers through the private appDataFolder; disconnecting a device does not delete the remote batches
• Pinboard: core bookmark API calls use your API token; Save Tab Set uses your existing Pinboard login cookie
• AI providers: the selected provider receives the inputs described above; tag governance sends tag names rather than bookmark content or per-tag use counts, and opt-in skim can run when Markdown preview opens
• Jina Reader: receives the page URL and, if configured, your Bearer API key when selected and a cached result is unavailable or refresh is requested
• Wayback Machine: receives saved page URLs and, if configured, Wayback S3 credentials automatically only while archiving is enabled and its exact grant remains active
• Obsidian: your local desktop app receives Markdown only through an explicit Send to Obsidian action via the local protocol or clipboard
• GitHub: receives Markdown only through an explicit Send to Gist action, authenticated with your own access token
• Your webhook endpoint: receives the documented JSON payload only through an explicit Send to Webhook action
• Notion: receives the page’s title, source URL, tags, and converted Markdown as a new page’s content only through an explicit Send to Notion action, authenticated with your own internal integration token
• NotebookLM: the extension sends no data over the network; the Send to NotebookLM action copies the converted Markdown to your clipboard and opens notebooklm.google.com in a new tab, and the content reaches Google only if you paste it there yourself
• YouTube: receives an automatic thumbnail request to i.ytimg.com when you open a YouTube-page preview; a watch-page request and a subtitle-track request when you click Load video & subtitles (made inside an open YouTube tab with that tab’s own session when one is available, otherwise sent directly from the reader page with your login cookies unless you turn off the setting described in item 20); and the ordinary traffic of the embedded www.youtube.com player, framed through this project’s GitHub Pages relay, once you load it
• GitHub Pages (pine2d.github.io): hosts this project’s own embed relay page, which the reader frames to load the YouTube player; GitHub receives the ordinary traffic of serving that static page. The page is part of this project, carries no analytics, and stores nothing
• Bilibili: receives the video ID/cid, the WBI signature, and your bilibili login cookies when a bilibili-page preview fetches subtitles (automatic once the origin grant stands; the first use asks via the Enable subtitles & load video click) (subtitles are login-gated, so these three API calls are sent with credentials), plus the ordinary traffic of the embedded player.bilibili.com player once it loads
• Remote image hosts: receive direct browser requests for images retained in Markdown preview, with no-referrer enforced as described above; if you use the preview’s Fix action for hotlink-blocked images (or previously granted those origins), they additionally receive one extension re-fetch per image carrying the article page’s origin as Referer
• Embedded export image hosts: receive a direct extension-page fetch for each image referenced in a Markdown/HTML/EPUB export only when you choose the Embed (offline) image policy and grant the one-time origin permission; images are embedded in the downloaded file (as data URIs, or as bundled files inside the EPUB) with no third-party relay
• Free Dictionary API (freedictionaryapi.com): receives the word you look up and its language code when you use the Dictionary lookup in Markdown preview, or a dictionary lookup (Look up again or the page’s own lookup box) on the Notes & Vocabulary page, and grant access; returns Wiktionary-based definitions licensed CC BY-SA 4.0
• AnkiConnect (project homepage): your local Anki installation receives all vocabulary book entries belonging to the current Pinboard account only through an explicit Send all to Anki action, authenticated with an API key you provide if AnkiConnect requires one; this is local software running on your device, so no data leaves it
• Eudic OpenAPI (API docs): your Eudic account’s default study lists receive the term text and language code of every supported-language vocabulary book entry belonging to the current Pinboard account only through an explicit Send all supported words to Eudic action, authenticated with an OpenAPI authorization value you provide; unsupported languages are skipped
• Your browser’s speech-synthesis service: when you use the pronunciation button, the extension asks the browser to speak the selected word or phrase. It prefers an on-device voice. If the browser resolves the request to a network-backed voice instead (on desktop Chrome, the built-in “Google language” voices), Chrome sends that text to its speech service; the extension holds no host permission for this path and cannot intercept it
• Offline English–Chinese dictionary pack (ECDICT CSV field layout): a dataset you obtain and import yourself. The extension reads that field layout; it does not provide, recommend or verify a source for the data, links to none, and is not affiliated with any. Importing the pack and looking up a word that matches it happen entirely on your device and add no network endpoint. When a lookup matches, the Chinese definitions appear above the English entry, which still loads exactly as before. Vocabulary exports (the TSV download and Send all to Anki) can include the matching Chinese text derived on this device, labelled as coming from your local pack; a device without the pack produces the same export without those pieces. Nothing derived from the pack is written into your vocabulary book or sent to Google Drive.
• CC-CEDICT (cc-cedict.org): an open Chinese-English dictionary dataset licensed CC BY-SA 4.0 that you download from MDBG and import yourself; the Open download page button only opens that page in a new tab; importing the pack and looking up a word that matches it happen entirely on your device and add no network endpoint; a lookup that misses the pack still falls back to the Free Dictionary API described above, and the AI contextual explanation (when configured) still requests your selected AI provider as described above, both unchanged from their existing behavior and disclosure

Optional-service permission denial or revocation sends nothing to that destination and does not erase its configuration. Selected Batch sites are accessed only to extract the content requested for that batch; they do not receive data from the extension.

Other than the services, configured destinations, Chrome Sync, and remote image hosts described above, the extension does not intentionally send data to third parties. No data is sent to the developer.

Changes

If this privacy policy changes, the update will be included in the extension release notes and the Last updated date above will be revised.

Contact

For questions about this privacy policy, open an issue at: https://github.com/pine2D/Pinboard-Bookmark-Enhanced/issues