CrossPin

CrossPin Website Privacy Notice

Publication date: 24 October 2026
Effective date: 24 October 2026
Version: 1.1

CrossDevApps, an Ontario, Canada sole proprietorship, operates CrossPin. Privacy contact: support@crosspin.app; +1 639-307-5156; business correspondence address: 6-2160 Highway 7, Suite 107, Vaughan, ON L4K 1W6, Canada. Our App Privacy Policy explains app/support processing, international safeguards and regional rights.

Website requests and providers

Page requests disclose IP addresses, browser/request headers, requested URLs, times and security information to the services delivering/protecting the site. The website is hosted through OpenAI Sites, using Cloudflare for delivery/security. See OpenAI's privacy information and Cloudflare's privacy information. We use requests to deliver pages, prevent abuse and investigate faults, relying on legitimate interests where EEA/UK law applies and other applicable lawful authority elsewhere. Providers process requests internationally.

The site has no advertising, session replay, contact forms or externally hosted fonts. It does not retrieve your Pins. OpenAI's applicable Sites hosting terms provide European and UK transfer safeguards for covered visitor information; Cloudflare's safeguards are described in App Privacy. These arrangements do not require processing to remain in your country.

Website analytics and search performance

We use Google Analytics 4 on crosspin.app to understand website visits and interest in desktop downloads and to improve the website. We record page views and clicks on the Windows and Mac desktop download links. Analytics information can include page URLs and referring sites, browser/device information, approximate location and pseudonymous cookie identifiers. Requests to Google also disclose your IP address. We do not send Pins, app content, app installation identifiers or User-ID values to Analytics. This website analytics setup does not add analytics to the CrossPin apps or link website visitors to app activity.

Google processes analytics information internationally under its applicable data-processing terms, which provide safeguards for covered international transfers. See Google's Privacy Policy, how Google uses information from sites that use its services, and Google's data-processing terms. Contact the Privacy Officer for information about applicable transfer safeguards and how to obtain a copy, subject to necessary redactions. Advertising features and advertising account links are disabled, and optional Google data-sharing settings are off. We do not use these statistics for advertising profiles or cross-site advertising tracking.

We also use Google Search Console to verify our domain and review how crosspin.app appears and performs in Google Search. Domain verification and search-performance reporting do not require Google Analytics or add visitor-tracking code to this website.

Cookies and similar technologies

Cloudflare may set __cf_bm for bot protection. It expires after 30 minutes of continuous inactivity and is separate from app identifiers. See Cloudflare's cookie notice. Browser settings may affect security checks. Necessary delivery and security processing does not depend on analytics consent.

When analytics is enabled, Google Analytics can set first-party _ga and _ga_* cookies to distinguish website visitors and sessions. These cookies are configured to expire within 30 days of being set, without extending their expiry on later visits. We store your analytics choice locally in your browser for six months so that we can apply it on later visits. You can change it sooner using Analytics settings in the footer of any page.

Where consent is required, including the EEA, UK and Québec, analytics stays off until you choose to accept it, and we rely on your consent for that analytics. We also require a choice before enabling analytics when we cannot determine the applicable region. We use coarse country and region information from Cloudflare solely to select website privacy controls; we do not use GPS location. Where applicable law permits analytics without prior consent, we rely on legitimate interests in understanding and improving website performance, and you can opt out at any time through Analytics settings. Recognised Global Privacy Control and Do Not Track signals keep analytics off by default. Refusing or withdrawing analytics does not restrict access to the website. Withdrawal does not invalidate earlier lawful processing.

External services apply their own policies. Email links open your mail app; CrossDevApps and Spacemail receive the messages/attachments you send as described in App Privacy. Do not send unnecessary confidential information.

Retention, rights and complaints

We keep website information to deliver and protect pages, diagnose faults and investigate identified abuse. The duration depends on the record, whether the issue is resolved, any continuing security threat, and a specific legal obligation or claim. Our hosts' technical logs and recovery systems have their separate service retention cycles; the support-email retention period and CrossPin backend log settings do not govern these hosting records. We retain separately preserved incident evidence only while needed for its identified purpose. Contact us for the retention information applicable to your request.

Google Analytics is configured for two months of retention for user- and event-level data subject to its retention controls, with reset on new activity disabled. Aggregated reports can remain available longer; the two-month setting does not delete every analytics statistic. The analytics-cookie and locally stored choice periods are described above.

Contact the Privacy Officer for access, correction, deletion or complaints. We verify proportionately and meet applicable legal deadlines. You may complain to a competent regulator, as linked in App Privacy. We do not sell personal information or share it for cross-context advertising. We date changes and provide required material-change notices.