Privacy Policy — Pikl

Pikl lets you save the images, videos, and links you love into visual canvases. This policy describes the personal data we collect, how we use it, where it is stored, and who we share it with. We only collect what we need to run your account and save the content you choose.

Who we are

Pikl is a visual bookmarking tool made up of a browser extension and a companion web app at usepikl.app. It lets you save images, videos, and links from around the web into visual boards called canvases. This policy explains what personal data Pikl collects, how we handle it, where it is stored, and who we share it with. Pikl is operated by James Battye. You can contact us any time at james@jamesbattye.dev.

Data we collect

Pikl only collects the information needed to run your account and store the content you choose to save. Specifically:

• Account information: When you create an account we store your email address, your display name, and a user identifier. Sign-up, sign-in, passwords, and any social logins (such as Google) are handled by our authentication provider, Clerk. We never see or store your password.
• Content you save: The images, videos, and links you explicitly save, along with related details such as the source page they came from, an extracted colour palette, image dimensions, and preview thumbnails. This also includes the canvases you create, the tags you add, and any comments you write.
• Organisation data: If you create or join a team, we store the organisation's name, its identifier, and your role within it (for example, member or admin).
• Product usage: We record a small number of product events tied to your account — for example, completing onboarding or importing a board — so we can understand how features are used and improve them.
• Diagnostics and error reports: When something goes wrong we collect error messages, performance data, and limited session information (including your user identifier) to diagnose and fix problems.
• Feedback you send: If you use the in-app feedback tool, we collect the message you write together with your name and email so we can follow up.

What we do not collect

Pikl is built to capture only what you deliberately save. It does not:

• Read, log, or transmit your browsing history.
• Read the content of the pages you visit, your keystrokes, or text you select.
• Take automatic screenshots of the pages you are on. (Preview thumbnails are generated only for links you have chosen to save.)
• Sell your personal data to anyone, ever.
• Show you third-party advertising.

How we collect it

You are always in control of what Pikl saves. The extension adds a save button on a small set of supported design-inspiration sites — Pinterest, Mobbin, Lapa Ninja, and a1.gallery — and a right-click menu option to save any image. Data is only captured at the moment you click one of these controls. Nothing is captured in the background as you browse.

Browser permissions we use

The Pikl extension requests the minimum Chrome permissions needed to work:

• Storage: To hold local extension state between sessions.
• Cookies: To read your Pikl sign-in session so the extension knows you are logged in.
• Context menus: To add the right-click “Save to Pikl” option for images.
• Site access: Limited to the Pikl backend, our authentication provider, and the supported save-button sites listed above. The extension does not request access to every website you visit.

How we use your data

We use the data described above only to:

• Create and secure your account and organisations.
• Store, organise, and display the content you save across your devices.
• Generate previews, colour palettes, and thumbnails for saved items.
• Diagnose errors and keep the service reliable.
• Understand product usage and respond to your feedback.

Where your data is stored

Your account details and saved content are stored in a database on Cloudflare, and your saved images and videos are hosted on Cloudflare's media services. Our processors are based in, or operate from, the United States, so your data may be processed there and in other regions where these providers run their infrastructure. We rely on our providers' standard contractual safeguards for any such international transfers.

Third parties we share data with

We share data only with the service providers that make Pikl work. Each receives only the data it needs for its specific function:

• Clerk: Authentication and account management. Receives your email, name, and organisation membership.
• Cloudflare: Database, image and video hosting, and application infrastructure. Stores your account records and saved media.
• ScrapingBee: Generates preview thumbnails for links you save. Receives the URLs of those links.
• ScrapeCreators: Resolves Pinterest pins and boards you save into their underlying images or videos. Receives the Pinterest URLs you save.
• Sentry: Error and performance monitoring. Receives error reports, performance data, and your user identifier.
• PostHog: Product analytics. Receives a small set of usage events linked to your user identifier.
• Marker.io: In-app feedback and bug reporting. Receives your name, email, and the feedback you submit.

We may also disclose information if required to do so by law, or to protect the rights, safety, or security of Pikl and its users.

Data retention

We keep your account information and saved content for as long as your account is active. When you delete an item, canvas, or your whole account, the associated records are removed from our database. Our diagnostic and analytics providers retain their data according to their own retention schedules. Backups and provider logs may persist for a limited period after deletion before being overwritten.

Your rights and choices

You can view, edit, or delete the content you save at any time from within Pikl. You may also:

• Delete your account, which removes your profile and cascades to delete your saved media, canvases, comments, tags, and memberships.
• Request a copy of the personal data we hold about you, or ask us to correct or delete it.
• Uninstall the extension at any time to stop all data collection by it.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any of these rights, email us at james@jamesbattye.dev and we will respond within a reasonable time.

Security

We protect your data with encryption in transit, access controls, and reputable infrastructure providers. No online service can be guaranteed perfectly secure, but we take reasonable steps to safeguard your information and to limit access to it.

Children's privacy

Pikl is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we make material changes we will update the date below and, where appropriate, notify you within the app. Continued use of Pikl after an update means you accept the revised policy.

Contact

If you have any questions about this policy or how we handle your data, reach out at james@jamesbattye.dev.