PinchaPlay transparency report
In short: PinchaPlay only enters a page when you click its icon or press Alt+Shift+R. Your settings, bookmarks and time saved stay on your computer. The only connection PinchaPlay makes by itself is checking your Pro key with Polar, and only after you enter a key.
Permissions and why
| Permission | Why |
|---|---|
storage | Remembers your settings, shortcuts, bookmarks, time saved, the trial start date and your Pro key on this computer only (not synced). |
activeTab | Lets PinchaPlay into the current tab only after you click its icon or press Alt+Shift+R; access ends when you leave the page. |
scripting | Puts PinchaPlay's own packaged controls into the page you chose (and into sites you set to Always on, with Pro). No remote code. |
https://api.polar.sh/* | Checks your Pro licence key with Polar, the shop, only after you enter a key, and again about once a day. |
https://*/*, http://*/* (optional) | Never granted at install. Asked one site at a time, only when you choose "Always on for this site" (Pro) and accept Chrome's prompt. |
Network connections (version 1.0.1, tested 11 November 2026)
| Address | When |
|---|---|
api.polar.sh | Only after you enter a Pro key: activation, then a check about once a day. No browsing data is sent. |
buy.polar.sh | Only when you click Buy: the checkout opens in a new tab. |
pinchavelho.github.io | Only if you click the link to the privacy policy online. |
We opened test pages with video and audio, used the shortcuts, opened every PinchaPlay page, clicked Buy and entered a test key, and recorded every request. Nothing else was contacted.
Where your data is
On your computer only: settings, shortcuts, bookmarks, time saved, trial date and Pro key in Chrome's extension storage, and the interface language you picked. Delete them in PinchaPlay's Options or by uninstalling PinchaPlay. Sites you set to "Always on" are kept by Chrome as a permission; remove them in Options or in Chrome.
Chrome Web Store
The privacy practices on the store listing are our own declaration, filled in to match this report. Listing: https://chromewebstore.google.com/detail/lcbdnpliajnokjhmlbgdcaeggbpjpahn
Check it yourself
- Open
chrome://extensions, find PinchaPlay and click Details to see the exact permissions Chrome granted. - Turn on Developer mode, click Inspect views: service worker, open the Network tab and use PinchaPlay: only the addresses above can appear.
- For a full log, open
chrome://net-export, record while you use PinchaPlay and open the file in the NetLog viewer.
History
| Version | Date | SHA-256 of the package sent to the store | Result |
|---|---|---|---|
| 1.0.0 | 9 November 2026 | e532065df56931c45234a50bb75b699cef0478b20c730c31395f7d48dc603664 | Automatic checks passed; published as "Ritmello", the earlier name of PinchaPlay |
| 1.0.1 | 11 November 2026 | d6b8f640bc636d0d1d58e98a80e4993d82d509c5e7144d1ef3a8127278478c70 | Automatic checks passed; first version named PinchaPlay |
The Chrome Web Store repackages and signs each upload, so the file you download from the store has a different checksum; the files inside are the same.
These are checks we ran ourselves. They are not an independent audit or a certification.
Report a problem
Found something that doesn't match this page? Write to opinchavelho@gmail.com. We answer, fix it and note it here.