PinchaPlay by Pinchavelho – Privacy Policy
What PinchaPlay can access, every network connection it makes and how to check it yourself: transparency report.
Controller: José Augusto Alves Pinhão, trading as "Pinchavelho", Estrada V Centenario Vila Sol I, Bloco B 3CE, 9360-500 Ponta do Sol, Portugal (other trader details in the legal notice: https://pinchavelho.github.io/legal-notice.html). Email: opinchavelho@gmail.com.
1. What the extension does NOT do
PinchaPlay does not collect, sell or share your browsing history, page content or media you watch. No analytics, no ads, no tracking, no remote code. It does not download media; it only changes how media already playing in your browser is played (speed and sound).
How PinchaPlay gets access to a page: it does not ask for access to all websites. It only works on a page after you click its icon or press its shortcut (Alt+Shift+R by default) – Chrome's "activeTab" and "scripting" permissions – and that access ends when you leave the page. With Pro you may choose "Always on for this site": Chrome then asks you to allow that one site, and PinchaPlay turns on there by itself. This access is used only to control the video and audio on the page; PinchaPlay does not read what you type or what the page shows, and sends nothing anywhere. You can withdraw any site in Options or in Chrome's extension settings.
Skip silences (Pro) measures the volume of the sound that is already playing on your computer, moment by moment, to know when nobody is speaking. Nothing is recorded, stored or sent.
2. Data stored on your device/browser
- Settings (on-screen indicator, Shift+mouse-wheel, list of sites where PinchaPlay is off) and shortcuts, and – only if you enable it – per-site settings (website hostname + speed/audio settings): chrome.storage.local, on your device. You can delete them in Options or by uninstalling.
- Study tools (Pro), only if you use them: bookmarks (page address with tracking codes such as utm_ and fbclid removed, the moment in the video and the name you give it, up to 500), "time saved" (one number per day for the last 90 days – no sites or titles) and your skip-silences preferences: chrome.storage.local, on your device. Delete them in Options ("Delete all bookmarks", "Reset to zero") or by uninstalling.
- Sites you chose for "Always on": kept by Chrome as a permission granted to the extension. Withdraw them in Options or in Chrome's extension settings.
- Installation date (to run the free trial locally) and, only if you enter one, your Polar licence key, its activation ID/label and the last check result: chrome.storage.local, on your device (not synced). "Remove key" in Options deletes the key.
- The interface language you choose: the extension's localStorage, on your device (not synced). Deleted when you uninstall.
This storage is strictly necessary for the features you request (ePrivacy Directive art. 5(3)).
3. Purchases, licence keys and trial
The 15-day trial (all Pro features) runs locally (installation date on your device); no sign-up and no data is sent.
Purchases are made on the checkout of Polar (Polar Software Inc., polar.sh), which acts as merchant of record: Polar is the seller of record, processes the payment (through its payment providers such as Stripe), charges and remits VAT/sales tax and issues the invoice/receipt. Polar collects your email address, billing country/address and payment details under its own privacy policy (https://polar.sh/legal/privacy) and makes the licence key available in its customer portal. We receive from Polar your email address, name if given, country, order date, amount and licence-key status – we never see your card details.
- What the extension sends to Polar: only when you enter a key, the key, our organisation ID and a random activation label (e.g. "PinchaPlay 3fa9c21b") to https://api.polar.sh, to activate it and re-check it about once a day (an offline grace period applies). No browsing data, URLs or media information are sent.
- Links you open yourself: "Buy Pro" opens Polar's checkout page (buy.polar.sh) in a new tab, and Options links to this policy online (pinchavelho.github.io). These pages are opened by you; the extension itself sends nothing to them.
- Like any internet request, these licence checks reveal your IP address and browser user agent to Polar, which processes them under its own privacy policy. The extension sends the requests without cookies.
- Withdrawal waiver: Polar's checkout asks you to tick the box "I want immediate access and I accept that I lose my 14-day right of withdrawal." Polar keeps that consent with your order and confirms it in the purchase email; we may receive it from Polar as proof of compliance (GDPR art. 6(1)(c)).
- Purposes and legal bases: providing the licence and support (contract, GDPR art. 6(1)(b)); accounting and legal obligations (art. 6(1)(c)).
- Recipients: Polar Software Inc. (merchant of record; USA – transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses, see Polar's policy) and its payment providers; our accountant and the tax authorities where required.
- Retention: licence data while your licence is active plus 2 years; accounting records as required by law (Portugal: 10 years).
4. Your rights
Access, rectification, erasure, restriction, objection and portability (GDPR arts. 15–21): write to opinchavelho@gmail.com. You may complain to the Portuguese supervisory authority, CNPD (www.cnpd.pt) or your local authority.
5. Children
PinchaPlay is not directed to children under 13; purchases require being of legal age or parental consent.
6. California and other US residents
Under the California Consumer Privacy Act (CCPA/CPRA) and similar US state laws: in the last 12 months we collected, only from buyers, identifiers (email address, name if given) and commercial information (order date, amount, country, licence status), received from Polar, for the business purposes of providing the licence, support and complying with law. We do not collect sensitive personal information.
We do not sell or share personal information (including for cross-context behavioural advertising), and we have no actual knowledge of selling or sharing data of consumers under 16.
You may ask to know, access, correct or delete your personal information by emailing opinchavelho@gmail.com. We will verify the request by matching the email used for the purchase. An authorised agent may act for you with your signed permission. We will not discriminate against you for exercising these rights.
7. This website
This website (pinchavelho.github.io) sets no cookies, uses no analytics or trackers and loads no third-party resources; fonts are self-hosted. It is hosted by GitHub Pages (GitHub, Inc., USA), which may log visitors' IP addresses for security and service operation, under GitHub's privacy statement: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement
8. Changes
We will update this page and the date above; material changes will be shown in the extension.