This Privacy Policy describes how the SparkWoodcraft Pinterest Integration (the "App") collects, uses, and protects information when it accesses the Pinterest API on behalf of a single authorized user — the owner of SparkWoodcraft. The App is a private business tool used exclusively by Eric, the owner of SparkWoodcraft, to manage the SparkWoodcraft Pinterest business account via the Pinterest API v5. It is not a consumer-facing product and is not accessible to the general public.
SparkWoodcraft is a small woodworking business operated by Eric. For questions about this privacy policy, contact: sparkwoodcraft@gmail.com.
The App accesses the following types of data via the Pinterest API on behalf of the authorized account owner:
The App uses the OAuth 2.0 authorization flow as required by Pinterest. All API access is performed using a securely stored OAuth access token issued by Pinterest to the account owner.
Pinterest API data accessed by this App is used solely to:
Data is not stored persistently beyond what is required for a single API session. Pinterest API responses are used in real time and are not written to any external database, data warehouse, or third-party service.
We do not share, sell, license, or transmit any Pinterest API data to any third party. API information is not used for advertising targeting, audience building, or any purpose outside of managing the SparkWoodcraft Pinterest account described in Section 4.
The App runs on Cloudflare Workers infrastructure. Cloudflare processes requests in transit but does not receive or store Pinterest data beyond standard request logging. For Cloudflare's privacy practices, see cloudflare.com/privacypolicy.
The App stores only the OAuth access token and refresh token required to maintain an authorized connection to Pinterest, held in Cloudflare Durable Object storage. These credentials are encrypted at rest by Cloudflare and are accessible only to the App. No Pinterest content (pins, boards, analytics) is persisted.
API credentials (App ID, App Secret, refresh tokens) are stored as encrypted secrets in Cloudflare Workers and are never exposed in source code or logs. The App communicates exclusively over HTTPS. Access tokens are refreshed automatically and are never shared.
As the sole user of this App, the account owner retains full control over Pinterest data at all times through their Pinterest account settings. Pinterest API access can be revoked at any time by visiting pinterest.com/settings/security and removing this App from authorized applications.
This App is not directed at children under 13 and does not knowingly collect any information from children.
If this privacy policy is updated, the "Last updated" date at the top of this page will be revised. Continued use of the App after any update constitutes acceptance of the revised policy.
For any questions or concerns about this privacy policy or the App's data practices, please contact: sparkwoodcraft@gmail.com