Privacy

Last updated 2 November 2026

Pinneds is a shared pinboard of real things, built by Moria Crew as a project for the Meta Global AI Developer Hackathon. Its code is open source under the GNU AGPL-3.0, so you can check what this page says: github.com/MoriaCrew/Pinned. This page describes what the app does with your data today.

  • Your photo. Your browser shrinks a photo before uploading it. Our server then makes a smaller working copy and strips its metadata (EXIF, such as location and camera details). The photo you uploaded is never stored: only the working copy, so you can tap to add things the AI missed. It is deleted when you pin your picks. If you leave without pinning, it can no longer be used after 24 hours and is deleted the next time anyone adds a photo to that board; a storage rule deletes any copy still left after that.
  • Cut-outs and scenes. Each thing cut out of your photo is stored as a picture, with a name the AI suggests and you can change. Scenes are stored as pictures too, with the idea that made them. They stay until they are deleted (see Your controls).
  • What you type. Your name on each board, board titles, pin names and scene ideas. If you add a 4-digit number to switch phones, we keep it only in hashed form.
  • Face reminder. The AI notes whether a photo shows a face. We keep that yes-or-no with each cut-out so the app can show a reminder (see People in photos).
  • Google sign-in (optional). If you sign in with Google, we keep a user id from Firebase (Google's sign-in service), your name and the link to your profile photo as Google shares them, the boards you join, and when. We never store your email address. You never need to sign in to use a board.
  • Usage logs. Each AI request is logged with ids (the board, your place on it, your user id if you are signed in, and the photo, scene or job), the kind of request, its size and an estimated cost. These logs hold no photos, cut-outs, ideas or AI replies. Each entry is set to be deleted 90 days after the request. We also count daily use per person and per board to apply fair-use limits.
  • Abuse protection. To slow down abuse, the app counts requests per internet (IP) address. The counters we save hold a hash of the address, not the address itself. To share free creations fairly, we also count the new boards each person starts, by a hash of their user id when signed in, else of their address. Our hosting provider, Google Cloud, also keeps standard request logs.
  • Reports. When content is reported to us, we may keep it while we handle the report, even after it is deleted from the board, and share it with the competent authorities where the law requires.
  • Payments. Board Plus is paid on Stripe's own checkout page. We never see or store your card number. We keep a record of each purchase (the board, the pack, the amount, its status and Stripe's ids for the payment, refunds and disputes) to add the creations and handle refunds. Stripe's privacy policy covers what you enter on its page.

Pinneds uses Meta's AI models through Meta's model API. What each one receives:

  • Muse Spark: the working copy of your photo, to name the things in it and notice faces; a thing you tap, to name it; and pin names, to suggest scene ideas.
  • SAM 3.1: the working copy, to cut each thing out.
  • Muse Image: the cut-outs picked for a scene, their names, the names of the people who pinned them and the idea (for a remix, also the scene being remixed), to make the scene.
  • Muse Voice: a voice clip of up to 30 seconds when you dictate an idea, to turn it into text. We don't store the clip.

We use Meta's API in its Standard mode, where Meta does not use this data to train its models. That does not mean Meta stores nothing: what Meta keeps, and for how long, is set by Meta's own terms. When making a scene, we also ask Meta not to store the request.

AI can be wrong or say no: names, cut-outs and scenes are generated, and Meta's safety checks may turn down some photos or ideas.

Pinneds runs on Google Cloud through Firebase: the app in Google's europe-west4 region (Netherlands) and the database in Firestore's eur3 location (Europe). Pictures are kept in Cloud Storage in the same Firebase project. Meta's model API and Stripe handle requests on their own systems, which may be outside Europe.

There is no account wall on a board: anyone who has its link can open it, see its names, pins and scenes, and join it. Share a link only with people you trust. Board pages ask search engines not to index them. When a board link is pasted into a chat app, the app can show a preview picture made from the board's pins. Everyone on a board can use its pins in scenes, and each scene credits the people whose pins are in it.

Pinneds only uses the cookies it needs to work. There are no advertising or analytics cookies and no third-party trackers.

pinned_player_…
Remembers who you are on one board. Kept 30 days.
pinned_host_…
Marks the browser that started a board as its host. Sent only with that board's own requests. Kept 365 days.
pinned_user
Keeps you signed in. Kept 30 days, or until you sign out.
pinneds_locale
The language you picked, if you picked one. Kept 365 days.

The app also keeps a few small notes in your browser's storage, such as which tips you have seen or a checkout in progress. They stay on your device. When you sign in, Google's sign-in library keeps its own sign-in state in your browser. Google's sign-in window and Stripe's checkout page are run by Google and Stripe under their own cookie and privacy policies.

  • Rename or delete your own pins. Deleting one removes it from the board and hides the scenes that used it; its pictures are deleted once no board still uses it.
  • Delete a scene you made. The board's host can delete any scene on the board.
  • The board's host can delete the whole board. It disappears for everyone and its pictures are deleted. Some text records, such as names, stay in our database, but nothing in the app shows them again.
  • Signed in, you can remove a board from My boards, or sign out. There is no button to delete your account yet: contact us and we will remove it.
  • For anything else, such as a copy of your data, a correction, or deleting something you can't reach, contact us. Depending on where you live, the law may give you more rights over your data; contact us to use them.

People are welcome in pins. When the AI spots a face, the app reminds you to pin it only if the people in it are happy to be there. It never blocks the photo. Ask before you upload a photo of someone else: anyone on the board can see their pin and use it in scenes.

When this page changes, the date at the top changes too. Every version is public in the repository's history.

Questions, requests about your data, or a refund: email contact@moriacrew.com.