Privacy policy
What we collect, why, and what never leaves your computer.
Last updated 13 October 2026
We collect as little as we can. This page lists all of it.
What we collect
Your account. Your email address, so you can sign in to Pinmist and to this website, and receive emails about your subscription.
Billing. Stripe, our payment processor, handles your card. We receive a customer reference, your plan, your subscription status and its renewal date. We never see or store your card number.
Your computers. For each computer you sign in to Pinmist on: a device identifier that Pinmist derives from the computer, the computer's name, its operating system, the Pinmist version, and when it signed in, last checked in and signed out. We also keep a one-way fingerprint (a hash) of the sign-in token Pinmist keeps on that computer, never the token itself. We use these to keep each account to one computer at a time.
Signing in. A cookie that keeps you signed in to your account page. We use no advertising or tracking cookies.
What we never collect
- Your iPhone's real location.
- The locations you simulate, the routes you play, your bookmarks or your history. These stay on your computer.
- The contents of your iPhone.
Services Pinmist talks to directly
To draw maps, find places and plan routes, Pinmist on your computer contacts these services directly. They receive what you search for or the points of a route, and your IP address, but not your account details:
- OpenFreeMap, for map tiles
- Photon (by Komoot) or Nominatim (OpenStreetMap), for searching places
- Valhalla or OSRM public servers, for routes
The map on our home page also loads OpenFreeMap tiles, and looks up a place name with Photon when you click the map. It sends the point you clicked, never your own location.
Who processes data for us
- Stripe, for payments
- Supabase, for our database and sign-in
- Vercel, which hosts this website
- Resend, which sends our emails
They handle data only to provide their service to us.
How long we keep it
We keep your account and computer details while you have an account with us. When you ask us to delete your account, we delete them, except billing records that tax law requires us to keep.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete your account. Email support@example.com from the address on your account. Depending on where you live, you may also complain to your data protection authority.
Pinmist is not for anyone under 18, and we do not knowingly collect data about children.