PinoDrive

1. Data We Collect

PinoDrive does not collect, transmit, or store any personal data on external servers. All data described below is stored exclusively in your browser's local storage on your own device and is never sent to PencilCard or any third party.

Data stored locally on your device

• Scan history summaries — after each scan, a summary is saved locally: the source label, total size, the name and size of the largest file found, and the name and age of the oldest item found. This summary is displayed in the Scan History panel. Full directory trees are held in memory only and discarded when the popup closes.
• Savings history — a log of cleanup sessions: how many bytes were freed, how many items were deleted, and which source was scanned. Used to display your cumulative savings total. No file names from deleted items are retained.
• Recent sources — the label and path of recently scanned folders, so you can re-scan them quickly. Stored locally; never transmitted.
• Scan quota counters — monthly counts of scans run, used to enforce the free tier scan limit. No file content is included — only a numeric count per calendar month.
• Future subscription status — reserved local storage for a future Free/Pro tier once paid Pro launches. The current production release is free-only.
• Onboarding status — a single boolean indicating whether you have completed the initial setup walkthrough.
• Theme preference — your choice of dark or light mode.
• Donation prompt timing — a timestamp recording when the donation prompt was last shown, to enforce a 90-day cooldown between prompts.

Data that is never retained

• Complete directory trees — held in-memory during a scan session and discarded when the popup closes or a new scan starts
• File contents — PinoDrive reads only file names and sizes, never file content
• Deleted file paths — once items are sent to the system trash, their paths are not stored by the extension
• IP addresses, device identifiers, or fingerprinting data
• Crash reports or diagnostic telemetry

2. How Data Is Stored

PinoDrive uses only one Chrome storage mechanism:

chrome.storage.local

All persistent extension data — scan history, savings history, recent sources, onboarding status, theme, and donation timing — is stored in chrome.storage.local. This data exists only on your current device. It is not synced to Google's servers, not accessible by other extensions or websites, and is removed automatically when you uninstall PinoDrive.

Note: chrome.storage.local is sandboxed to the extension and protected by your operating system's user account permissions. It is not additionally encrypted beyond that OS-level protection.

PinoDrive does not use chrome.storage.sync

No data is synced to Google's servers or any cloud service. All data remains on the device where PinoDrive is installed.

In-memory scan data

The full directory tree produced by a scan is held in the extension's JavaScript memory (via Zustand state) for the duration of the popup session. It is never written to any storage API. When the popup closes, all scan tree data is lost from memory.

3. Network Connections

PinoDrive's core scan workflow is local-first. By default it only connects to your own machine (loopback) for optional agent features. Optional connected plugins may access user-approved web hosts when you explicitly enable them.

Optional local agent — 127.0.0.1:7843

PinoDrive can optionally connect to a local helper program (the "PinoDrive agent") that runs on your computer at http://127.0.0.1:7843. This agent performs deep filesystem scans, moves files to the system trash, opens files in Finder, and compresses folders — operations the browser extension cannot do on its own due to Chrome's security sandbox.

This connection uses two protocols:

• HTTP (http://127.0.0.1:7843) — used for commands such as trash, open, compress, and fetching available storage sources.
• WebSocket (ws://127.0.0.1:7843) — used to stream real-time scan progress as the agent walks the directory tree.

Both connections go only to localhost — your own machine. No data crosses a network boundary. The agent is designed to bind exclusively to 127.0.0.1 and will not accept connections from any external host or IP address.

No other network connections

PinoDrive does not connect to PencilCard analytics, advertising, or tracking services. Outside of the optional local agent on 127.0.0.1:7843, PinoDrive makes no external network calls. No file names, paths, sizes, or scan trees are transmitted to any server.

4. Permissions Justification

The following permissions are declared in PinoDrive's manifest.json. Each permission is used exclusively for the feature described — never for tracking or analytics.

5. Data Sharing

PencilCard does not sell, rent, trade, or otherwise share your personal data with any third party.

PinoDrive does not transmit scan trees, file names, paths, or sizes to PencilCard servers. Optional plugin connections are direct browser-to-service requests only after user enablement, and are scoped to the optional hosts you grant.

Because the core product does not store user data on our servers, we cannot be compelled to share it. If you enable optional cloud features, those providers’ policies will apply to any transmitted data.

6. Your Rights & Data Deletion

Because all data is stored locally on your device, you have complete control at all times.

Delete all PinoDrive data

Open the PinoDrive popup → Settings → "Clear all extension data". This permanently deletes scan history, savings history, recent sources, scan quota counters, plugin cache, plugin preferences, any reserved future subscription status, onboarding status, and all other preferences from your device.

Delete specific data types

Scan history can be cleared individually in the Scan History panel. Recent sources can be removed one at a time from the source list. Theme and other preferences reset to defaults when you clear all data.

Uninstall

Uninstalling PinoDrive from Chrome removes all locally stored data automatically. Because PinoDrive does not use chrome.storage.sync, no data remains in any cloud service after uninstall.

Access your data

All data PinoDrive stores is directly inspectable in Chrome DevTools → Application → Storage → Extension Storage. Keys used: pinodrive_scan_summaries, pinodrive_past_savings, pinodrive_recent_sources, pinodrive_onboarding_complete, pinodrive_donation_last_shown, pinodrive_scan_count_* (monthly scan quota counters), and pinodrive_subscription (reserved future subscription tier).

Local agent data

The optional local agent stores a cache of scan results on disk at ~/.pinodrive/. This cache is managed by the agent, not the extension. You can delete it manually at any time by removing that directory, or by uninstalling the agent.

Your rights under UK & EU data protection law

Because PinoDrive stores all data locally on your device and transmits nothing to PencilCard servers, you already hold the fullest possible control over your data. Specifically, under UK GDPR and EU GDPR, you have the right to:

• Access — all data PinoDrive holds is directly inspectable via Chrome DevTools → Application → Storage → Extension Storage.
• Rectification — you can edit or overwrite any stored preference directly in extension settings.
• Erasure — use Settings → "Clear all extension data" or uninstall the extension to permanently remove all data.
• Portability — all data is stored in plain JSON within Chrome's extension storage and can be exported from Chrome DevTools.

For data held by third-party services you interact with (Google Chrome sync infrastructure, any future optional cloud integrations), please exercise your rights directly with those providers. For any privacy enquiries about PencilCard's handling of your data, email privacy@pencilcard.com.

7. Children's Privacy

PinoDrive does not knowingly collect any information from children under 13. As no personal data is collected or transmitted to any server, the extension is suitable for all ages. Parents should note that the extension can read folder names and file names on any directory the user grants access to — it is intended for use on the account holder's own storage.

8. Policy Changes

We will update this page if the privacy practices of PinoDrive change. Significant changes — such as any new data collection or new external network connections — will be communicated via a notice in the extension update and an update to the "Last updated" date above. For minor clarifications we update the effective date only. We will not retroactively apply material changes to data already collected without notifying you first.

The current version of this policy is always accessible at pencilcard.com/privacy-pinodrive.

9. Contact

For privacy-related questions about PinoDrive, contact us at:

• Privacy email: privacy@pencilcard.com
• General: hello@pencilcard.com

We aim to respond within 5 business days.