Pinhop

Privacy policy

Last updated November 9, 2026

Pinhop is a Mac app that sets the GPS location of a USB-connected iPhone, iPad or Android phone. This policy explains what information we collect on this website and when you buy Pinhop, who helps us process it, and the choices you have. We don’t sell your data and we don’t show ads.

Who we are

Pinhop is operated by Patrick Lynch, a sole proprietor based in the United States (“Pinhop”, “we”, “us”). We are the controller of the personal data described here. You can reach us any time through the contact form.

The Pinhop app

  • The app sends nothing to us: no account, no tracking, no usage statistics, no crash reports.
  • Locations you set and your recent locations stay on your Mac.
  • The map and place search use Apple Maps, so the places you look at and search for go to Apple under Apple’s privacy policy.
  • If you allow it, the app reads your Mac’s current location only to center the map. It never leaves your Mac except as part of an Apple Maps request.
  • To simulate a location on an iPhone or iPad, the app may download Apple’s developer disk image the first time a device needs it. That request goes to Apple or to the public open-source repository that hosts the image, not to us.

What we collect

When you buy Pinhop

  • Stripe and Link handle the payment. We receive your email address, name, country, what you bought and the payment status. We never see or store your card number.

When you download Pinhop

  • The download comes from a private file store through a link that works for five minutes. Our storage provider keeps basic technical logs, including your IP address.

Messages

  • What you send us through the contact form: your email address, the topic and your message.

Visiting the website

  • Which pages you visit and what you do on them (for example: clicked Buy, opened checkout, completed a purchase, downloaded), the page that sent you to us, your browser and device type, and an approximate location (country or city) derived from your IP address.
  • Basic technical logs kept by our hosting providers to run and secure the site.

How we use it

  • To sell and deliver Pinhop: taking payment, giving you the download, handling refunds (performance of our contract with you).
  • To answer you when you contact us (our contract with you, or our legitimate interest in helping you).
  • To understand and improve the website: which pages help people decide and which links bring visitors (our legitimate interest, and your consent for analytics cookies).
  • To keep things safe: preventing fraud and abuse (our legitimate interest).
  • To meet legal duties, such as tax and accounting records for payments (legal obligation).

Cookies and browser storage

Checkout needs a few cookies from Stripe to work and to prevent fraud; these are strictly necessary and don’t need consent. Analytics cookies are optional. If you choose “Accept”, our analytics provider (PostHog) stores an identifier so it can recognize your browser across visits. If you choose “Reject”, or haven’t chosen yet, nothing is stored for analytics: we only count anonymous page views and actions within a single visit. You can change your choice any time in .

Who helps us run Pinhop

We share personal data only with the service providers we need, and only for the purposes above:

  • Lovable: hosting of the website.
  • Supabase (through Lovable Cloud): stores contact form messages.
  • Stripe and Link (Stripe’s checkout service): payments. Pinhop is sold through Link, which acts as the reseller and handles sales tax and VAT; Link’s and Stripe’s privacy policies apply to the payment information you give them.
  • Cloudflare (R2 storage): stores the installer and serves your download.
  • PostHog: website analytics, hosted on servers in the European Union.

We may also disclose information if the law requires it, or to protect the rights and safety of our customers or Pinhop.

International transfers

Pinhop is run from the United States, and some of our providers process data in the United States or other countries. When personal data from the European Economic Area, the United Kingdom or Switzerland is transferred, we rely on the safeguards our providers offer, such as the EU‑U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

How long we keep it

  • Purchase records: as long as tax and accounting law requires.
  • Contact messages: as long as needed to help you, and no longer than two years.
  • Analytics data: no longer than two years.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, get a copy of it, correct it, delete it, restrict or object to how we use it, and withdraw consent at any time (this doesn’t affect what we did before). To use any of these rights, contact us; we’ll answer within one month.

If you are in the EU, the UK or Switzerland, you may also complain to your local data protection authority. California residents have similar rights to know, delete and correct their information; we don’t sell or share personal information for targeted advertising.

Children

Pinhop is not meant for children under 16, and we don’t knowingly collect their personal data. If you think a child has given us data, please contact us and we’ll delete it.

Security

We use encrypted connections, short-lived download links, and reputable providers. No service can promise perfect security, but we work to protect your data and will tell you if a breach affects you where the law requires.

Changes

If we change this policy, we’ll update the date at the top. If a change is significant, we’ll say so on this site.