Privacy Policy

What does PinDownload collect?

PinDownload asks for very little. You do not sign up, you do not give a name or email to use it, and you never type a Pinterest password. Beyond what a web request needs to work, the only thing our code records about you is one row per page view in a first-party visit log, described below.

This policy is written from the site's actual code, not a template. It covers pindownload.net and its download tool, and was last checked against the code on 2026-10-25. If the code changes how data is handled, this page will change first.

What happens to the link I paste?

The link travels to our server in the request so the server can read the pin's public data from Pinterest. Our code does not write it to a database, a file or a log; it is used to build the answer and then discarded.

When our server asks Pinterest for a pin, the request comes from our server, not from your device, so Pinterest does not receive your IP address for that lookup. Identical lookups of the same pin may be cached by our hosting network for up to five minutes, keyed by the pin, not by you.

If you open the tool with a link already in the address (a page address ending in ?url=…), the tool starts right away with that link. That address is kept in your browser history like any other page you visit.

Does PinDownload store the files I download?

No. Each download button holds a signed link that is valid for one hour. The link contains the file's address on Pinterest's servers, the file name and the expiry time, sealed with a signature so it cannot be altered. It contains nothing about you.

When you click, our server checks the signature, fetches the file from Pinterest's image and video servers only, and streams it straight to your browser, marked as not to be cached. No copy is kept on our side. After the hour, the link answers "Link expired".

Is the audio extraction private?

Yes. On the audio page, your browser downloads the MP4 through the signed link and copies its AAC sound track into an .m4a file on your own device. The finished audio is never uploaded to us or anyone else.

Does my browser talk to Pinterest directly?

Yes, for previews. The thumbnails on the result card, and the video if you press Play, load straight from Pinterest's image servers. Those servers therefore see your IP address, as with any image on the web, and handle it under Pinterest's own policies.

We ask the browser to send no referrer with those preview requests, so Pinterest is not told which PinDownload page you were on. MDN describes that setting as follows.

“The Referer header will be omitted: sent requests do not include any referrer information.”

Downloads themselves go through our signed link, not directly from your device to Pinterest.

Does PinDownload use cookies, analytics or ads?

Our code sets no cookies, loads no third-party analytics, tracking or advertising script, and shows no ads at launch. Pages use only the site's own files and system fonts, so no third-party font or script service is contacted. Our code keeps only two things in your browser:

• A random session ID in sessionStorage, used to group the page views of one visit in the visit log. The browser deletes it when you close the tab.
• A cache kept by a service worker (sw.js): the site pages you open and the site's /assets/ files, so the site can start offline and work as a home-screen app. It never caches /api/ lookups or downloads. Clearing this site's data in your browser removes it.

If we ever add third-party analytics or advertising, this policy will be updated before it goes live, naming the provider and what it collects, and any consent required by law will be asked for.

What does the visit log record?

On every page view, your browser sends a small beacon to /api/t on pindownload.net itself. It goes to our own site, not to a third party, and sets no cookie. Our code stores one row per page view in Cloudflare D1, the database service of our host, with these fields:

• A random page-view ID and the random per-tab session ID described above
• The time, the site and the page path (the address without the part after ?, so a link placed in the address is not recorded)
• Your IP address, and the country and city Cloudflare derives from it
• The referrer (the page that sent you here), when your browser shares it
• Your user agent (browser and device), browser language and screen width
• The visible time spent on the page, sent when the tab is hidden and capped at 2 hours

Nothing is sent when the browser reports that it is automated (navigator.webdriver), requests from known bots are ignored, and nothing is recorded on preview copies of the site.

The log is used only for aggregate statistics for the site owner: how many people visit, from which countries, which pages they read and which sites or search engines sent them. It is not sold, not shared, not used to build an advertising profile and not used to follow you across other sites.

Raw rows are deleted automatically after 90 days; daily totals (counts of visits, pages, countries and sources, with no IP address) are kept. Separately, 1 in 10 requests to /api/ adds to an anonymous daily counter that stores only the date, the site and the request type, with no IP address.

What does the Paste button read?

The Paste button reads the text on your clipboard only when you press it, and only to put it in the link box. It uses the browser's Clipboard readText() method, and some browsers ask your permission first. Nothing is sent until you press Download.

Who hosts PinDownload and what do they see?

The site and its download functions run on Cloudflare's network. Like any host, it must process your IP address and basic request details to deliver pages to you. That processing is done by the host under its own policies, not by code we wrote.

Our pages also tell browsers to block camera, microphone and location access, and to send only the site's origin, not full page addresses, as referrer when you follow a link to another site.

What happens when I email PinDownload?

If you write to [email protected], we receive your email address and whatever you put in the message. We use it only to answer you and fix the problem you report. We do not sell it, add it to a mailing list or share it.

We keep messages as long as needed to handle your request and any follow-up. You can ask us to delete your messages at any time by writing to the same address.

What are my rights over my data?

Data protection laws such as the UK GDPR give you rights over personal data an organisation holds about you. GOV.UK summarises the purpose of these laws this way.

“Data protection legislation controls how your personal information is used by organisations, including businesses and government departments.”

The rights it lists include being informed, access, correction, erasure, restriction and objection. In practice this concerns the visit log and emails you sent us. Visit-log rows are keyed by IP address and time, so to ask for yours to be deleted, write to [email protected] with your IP address and the approximate time of your visit; we delete them where we can identify the rows. The same address handles seeing, correcting or deleting your emails. See GOV.UK's data protection page for the full list.

Where can I read more?

The terms of use explain the rules for using the tool, the about page explains who runs it, and the copyright page covers notices from rights holders.

Frequently asked questions

Sources

• Data protection — GOV.UK
• Referrer-Policy header — MDN Web Docs
• Clipboard: readText() method — MDN Web Docs
• Using HTTP cookies — MDN Web Docs
• Terms of Service — Pinterest Policy