SidePinner Privacy Policy

Effective date: October 26, 2026

1. Who operates SidePinner

SidePinner is an independent browser extension operated by Reynolds Li. This policy covers the SidePinner website, extension, synchronization service, and optional exports. For privacy questions or requests, email reynolds.leen@icloud.com. SidePinner is not affiliated with the AI platforms it supports.

2. Information processed in your browser

To display navigation and locate messages, the extension reads prompts, answers, conversation identifiers, titles, and URLs on supported AI chat pages. On ChatGPT, it may retrieve the current conversation through ChatGPT's own API using your existing signed-in session, so navigation can include messages not currently rendered on screen. This processing takes place in your browser; ordinary navigation does not upload the full conversation to SidePinner's cloud service.

Marks may include selected prompt and answer text, conversation URLs or identifiers, timestamps, colors, and folder assignments. The extension stores marks, preferences, trial status, and activation information using browser extension storage and the supported site's local storage. Preferences include panel position, size, language, appearance, and export settings. Data in a site's local storage is not an encrypted private vault and can be accessible to that site. Do not use SidePinner to store passwords or other secrets.

3. Optional sign-in and cloud synchronization

If you choose Google sign-in, Google provides an account identifier, email address, and authorization token. These are used for sign-in and to associate your synchronization data with your account. The extension stores sign-in information locally and sends authorization information and an account namespace to the synchronization service.

When you sign in and use cloud synchronization with Pro or a trial, saved marks and relevant panel settings are transmitted over HTTPS to ai-marker-sync.reynoldsln.workers.dev, operated using Cloudflare Workers. The currently configured cloud storage is Cloudflare R2. Your saved marks can contain both the question and answer, rather than only a bookmark identifier. Synchronization can run automatically while you remain signed in. It does not mean that your entire unmarked conversation history is uploaded. Signing out stops account synchronization but does not itself delete previously stored cloud data.

4. Optional Notion and Obsidian exports

Connecting Notion sends an authorization request to Notion. The SidePinner OAuth service exchanges the authorization code with Notion and returns the access token to the extension, which stores it locally together with the selected workspace and destination. Exports send the prompts and answers you select, including selected batches, to Notion's API. You can disconnect in the extension and revoke access in Notion. Copies already exported remain in your Notion workspace until you delete them there.

Obsidian export passes the selected content, vault name, and file path to the Obsidian application through an obsidian:// URI. It requires a local Obsidian installation and the Advanced URI community plugin. SidePinner does not upload these exports to a separate SidePinner Obsidian server. Any synchronization you enable inside Obsidian is governed by your Obsidian configuration and providers.

5. Payments and support

Creem acts as Merchant of Record for Pro purchases and handles checkout, billing information, payment processing, taxes, and subscription management. SidePinner does not collect full payment-card details in the extension or website. Purchase email, order or subscription details, and activation information may be processed to provide support, verify a purchase, and manage access or refunds. When you email us, we receive your message and any information you include. Please avoid sending full conversations or secrets unless they are needed to explain a problem.

6. Purposes and third parties

We process information to provide navigation, save and synchronize your marks, perform requested exports, support customers, administer subscriptions, and maintain service security. Depending on the context and applicable law, these activities rely on performing our service agreement, your choice to enable optional features, legitimate interests in running and securing the service, or legal obligations.

Information is shared as needed with Cloudflare for hosting and synchronization, Google for sign-in, Notion for authorized exports, Creem and its payment partners for purchases, and the email provider used for support. These providers process data under their own terms and privacy policies. We may also disclose information when required by law or to protect the service and users. We do not sell personal information or use conversation content for advertising or profiling. The website does not include advertising or analytics scripts or set application cookies; hosting providers may process IP addresses, request metadata, and security logs to serve and protect it.

7. Storage, retention, and international processing

Local data remains until you remove it, clear the relevant browser or site storage, or uninstall the extension; data in website local storage may remain after uninstalling. Cloud synchronization data remains stored until deleted or removed as part of service administration; simply stopping synchronization or cancelling a subscription does not erase it. Contact us to request cloud deletion. Synchronization copies are not end-to-end encrypted, and HTTPS protects transport rather than making stored data unreadable to the service operator.

Support correspondence and purchase records may be retained for support, billing, fraud prevention, and applicable legal or accounting requirements. Third-party export copies and payment records follow those providers' retention policies. Providers may process data in countries outside your country of residence. There is no fixed automatic expiry period for cloud synchronization data. Storage locations depend on the service providers.

8. Your choices and rights

You can use local navigation and marking without signing in, choose whether to use cloud sync or exports, sign out, remove marks, clear browser storage, disconnect Notion, and delete exported copies at their destinations. Back up needed content before clearing data. Local deletion is not a substitute for requesting deletion of cloud copies on all devices.

To request access, correction, export, or deletion of personal data held by SidePinner, or to object to or restrict processing or withdraw consent where applicable, email reynolds.leen@icloud.com with the account email or identifier and the scope of your request. We may need to verify that the account is yours. We respond as required by applicable law and explain any legally required retention. You may also have the right to complain to your local data protection authority. Withdrawing permission does not affect processing that was already lawful.

9. Security and children

We use HTTPS for network requests to our service and supported providers. No system is completely secure. Keep your browser and device secure, review the permissions you grant, and avoid synchronizing confidential material you are not authorized to share. SidePinner is not directed to children under 13, or a higher minimum age where required by local law. Contact us if you believe a child has provided personal data.

10. Policy updates and contact

We update this policy when our practices change and revise the effective date. Material changes will be identified on the website. Questions and privacy requests: reynolds.leen@icloud.com.