Privacy Policy — pinterest-post

Effective 2026-09-25

What this application is

pinterest-post is a small program written and operated by Hibiki Hata. It publishes pins from a local queue to the operator's own Pinterest boards on a schedule, and reads the operator's own pin and account analytics. It is registered with Pinterest under the app name MyDesigns. It runs on the operator's computer. It is not offered to other users and has no accounts of its own, so it handles data belonging to one person: its operator.

What it accesses

The application authenticates with Pinterest through OAuth and requests exactly these scopes:

• boards:read — to list the operator's boards
• pins:read — to read pin analytics
• pins:write — to create pins
• user_accounts:read — to read account information and account analytics

What it stores

The OAuth access token and refresh token are stored in a single file on the operator's computer with file mode 0600, readable only by the operator's user account. They are transmitted to the Pinterest API and nowhere else. The queue of pins to publish, and the images they reference, are also local files.

What it transmits, and to whom

When a pin is published, the application sends one request to the Pinterest API containing:

• board_id — the destination board
• media_source — the image, base64-encoded, together with its content type
• and, when supplied for that pin, title, description, alt_text and link

The access token travels in the Authorization: Bearer header of each request. Analytics requests send only date ranges, pin identifiers and metric names.

Pinterest is the recipient of this data; reaching Pinterest is the purpose of the application. Nothing is sold, and nothing is disclosed to any party other than Pinterest.

Deletion requests and questions

Open an issue at github.com/HibikiHata/HibikiHata/issues. Because the application stores only its operator's own data, a deletion request is fulfilled by the operator removing the local files described above.

Changes

Revisions to this policy are published at this address with an updated effective date.