Privacy Policy

Pinned collects nothing. There is no analytics, no telemetry, no crash reporting, no account, and no server that belongs to us. This page explains what that means precisely, because a privacy policy that only says "we care about your privacy" tells you nothing.

What Pinned reads

Pinned reads network counters that macOS already keeps, and information about your network interfaces. All of it stays on your Mac.

• Byte counters for your network interfaces, from the kernel.
• Interface details: name, hardware address, link speed, IP addresses, DNS servers, and for Wi-Fi the network name, signal strength and channel.
• Per-app bandwidth, by asking macOS which processes are moving data.
• Your usage totals, stored in the app's own container on your Mac.

What leaves your Mac, and only if you ask

In its default configuration Pinned makes no outbound network request of its own. The only exceptions are the features below. Each is off until you turn it on, except the responsiveness test, which runs only while you are running it:

• Connectivity and latency checks. Off by default. When enabled, Pinned sends ICMP echo requests to a host you choose (1.1.1.1 by default) to measure latency, jitter and packet loss.
• Public IP lookup. Off by default. When enabled, Pinned requests cdn-cgi/trace from Cloudflare to learn your public address and country. The result is shown to you and is never written to disk. Turning the feature off drops it from memory immediately. Cloudflare will see that request, as it would see any request your Mac makes to it.
• The responsiveness test. Runs only when you press the button. It transfers data to and from Cloudflare's public speed endpoint to measure how your connection behaves under load.
• Weather. Off by default. When you switch it on, Pinned asks the Norwegian Meteorological Institute for the temperature where you are, at most once every fifteen minutes. It sends a position rounded to two decimal places, which is about a kilometre, and nothing else: no account, no API key, no identifier for you. Neither the position nor the reading is written to disk. We chose a national weather service publishing open data over a commercial API precisely so that the only thing anybody receives is a rounded coordinate, and so that no key of ours ships inside the app.

That is the complete list. Nothing else is sent anywhere.

Location

macOS will not tell an app the name of the Wi-Fi network you are on unless that app has location access. Pinned asks for it for two reasons and no others: to show you that network name, and, if you turn the weather module on, to fetch the temperature where you are. It asks at the moment you request one of those, never at launch. Your location is never written to disk. It leaves this Mac only for weather, only while that module is on, and only rounded to about a kilometre. If you decline, every other feature keeps working.

Purchases

Pinned Pro is an auto-renewable subscription handled entirely by Apple. We never see your payment details, your Apple Account, or your name. Apple tells the app one thing: whether a valid subscription exists.

Data we hold about you

None. We have no server, no database and no account system, so there is nothing for us to hold, share, sell, lose, or hand over. There is no data to request or delete, because it never leaves your Mac. Removing the app removes its data with it.

Children

Pinned is a utility with no user content, no messaging and no advertising. It is suitable for all ages and collects nothing from anyone, including children.

Changes

If this policy ever changes, the date above changes with it. If a future version of Pinned ever collects anything, that will be stated here plainly and before it ships.