Privacy policy

Picky is operated by 杭州丹悦科技有限公司 (“we”, “us”, or “our”). This policy covers the picky.page website, the Picky Chrome extension, and their supporting services. It explains how we process personal information and the choices available to you.

Picky helps you select, save, and revisit web content. Each Pick belongs to at most one collection. Uncollected Picks are public by default; you can turn this off in settings. Collected Picks follow their collection’s visibility. New collections default to public and can be created private. Public content appears on your profile; RSS is not available. Our User agreement explains the rules for using the service. When you make a collection public, anyone can view its active content, sources and required media, and search engines may index it. Later membership and ordering changes appear automatically; adding content to a public collection makes it publicly accessible.

Account and preferences: your sign-in email, email verification status, account identifier, username, display name, interface language, time zone, Pick card duration, and account creation and update times. If you sign in with Google, we also receive the account identifier, name, email, profile image, and authorization information returned by Google to complete authentication. Picky does not ask you to give us your Google password.

Content you choose to save: the capture page address, a target link associated with your selection, page title, site name and icon, description, capture time, and selected text, code, images, screenshots, or sanitized HTML fragments. The fields saved depend on your selection and the information available on the page.

Sign-in and operational information: session and extension credentials, the IP address and browser information associated with sign-in, and request identifiers, endpoint paths, response status, duration, and error types. Verification codes are stored as hashes. This information supports authentication, abuse prevention, and troubleshooting. The extension also keeps up to 2,000 local capture diagnostic records for 7 days, excluding page content, images, full URLs and credentials. These records are never uploaded automatically; you can enable developer mode to export them yourself.

The email address, description, attachments, and correspondence you provide when contacting us. Please send only what is needed to handle your request, and do not email passwords, verification codes, or access keys.

Clicking the extension icon opens the side panel. Opening the panel or signing in does not start a capture. The extension saves a selection only after you start the capture tool, such as through “Select page content” or its shortcut, and confirm an element or region. It does not continuously record your browsing history.

During capture, the extension reads content related to your selection and information about the current page. To create a screenshot, the browser may first generate an image of the visible area locally and then crop it to your selection. A selected image is saved as a static image when readable, or otherwise as a clearly indicated screenshot.

The extension requests access to all websites during installation so you can start selection and capture screenshots from the side panel after switching tabs or websites. It only runs the capture tool when you explicitly start it; opening the side panel or switching tabs does not capture content. Other permissions support the side panel, sign-in, local settings and pending uploads, and writing to the clipboard when you choose Copy. The extension does not request browsing-history, clipboard-reading, camera, microphone, or location permissions.

Screenshots and selected content may include personal information, confidential material, or access links from sites where you are signed in. Check the selection before confirming. Avoid capturing identity documents, financial accounts, health information, passwords, links containing access credentials, or information about others that you are not entitled to process.

We use necessary account and content information to create and maintain your account, verify sign-ins, sync and display Picks, provide search, Trash and restoration, and handle support requests. Sign-in and security information helps prevent unauthorized access, abuse, and other threats to the service.

We process information on grounds permitted by applicable law, including where necessary to provide the service you request, to meet legal obligations, and with your consent where required. You may withdraw consent for optional processing based on consent without affecting earlier lawful processing. Declining information necessary for a particular service may prevent that feature from working.

We do not sell your personal information or use your private Picks for advertising profiles or model training. The current version has no advertising trackers or third-party behavioral analytics tools. If an optional future feature changes how information is used, we will explain it separately and obtain any consent required by law.

The website uses essential sign-in cookies to recognize a session and a picky_locale cookie to remember your language. Sign-in sessions last up to 7 days; the language cookie lasts for 1 year. You can manage them by signing out or using browser settings. Blocking essential cookies may prevent sign-in from working.

The extension stores authorization credentials and the login-page language locally in your browser, and caches account preferences and list information. Language, time zone and Pick card duration are saved with your account through the website. Pending content and images are temporarily stored in a local database so uploads can be retried after a connection problem. Upload jobs are valid for 24 hours; expired jobs are cleaned up when the extension next processes them. Operation previews of saved content can remain until you dismiss them or leave the associated page.

Clearing browser or extension data may remove local settings and content that has not yet uploaded. Disconnecting the extension does not close your account or delete synced Picks, and the website remains signed in. Uninstalling the extension also does not delete your account or server-stored content.

Cloudflare provides infrastructure for the website, network requests, account and content storage, and private image storage, processing data needed for those services. When you use email-code sign-in, Resend processes the recipient address, verification email content, and delivery information. When you choose Google sign-in, Google handles the sign-in request under its own privacy policy and returns the account information you authorize to Picky.

When showing a source-site icon or a profile image hosted by a third party, your browser may request the image directly from that host, which receives ordinary request information such as your IP address. Following a source or target link takes you to a third-party website governed by its own policies.

We disclose information only as needed to provide the service, meet legal disclosure obligations, or handle security incidents, and limit recipients’ permitted purposes. If a merger, acquisition, or business transfer involves personal information, we will provide legally required information about the recipient and effects, and require continued protection. New purposes must separately satisfy applicable legal requirements.

User data obtained through the extension is subject to the Chrome Web Store User Data Policy, including its Limited Use requirements. It is used only to provide or improve the clearly described capture and content-management features, never for personalized advertising or sale to data brokers. We do not allow people to read your private captures except in permitted circumstances, such as troubleshooting a specific issue with your consent, addressing security incidents, or meeting legal obligations.

While you use the service, we retain information needed to provide your account and private library. Sign-in credentials expire according to their validity periods; that does not mean all related records are erased at the same moment. Necessary retention of security, troubleshooting, and correspondence records depends on their purpose and applicable legal requirements.

Deleting a Pick, or choosing Undo after a Pick has been saved, first moves it to Trash. You can restore it on the website within 14 days of its first move to Trash. Repeated deletion does not restart that period. You can also choose permanent deletion earlier. Once the period ends or permanent deletion has started, the content can no longer be accessed or restored.

Permanent deletion records the instruction before erasing the Pick’s source links, title and content, removing collection and image references, and invalidating older exports containing it. Images no longer used by another active Pick, avatar or valid export are cleaned up in background batches. Minimal deletion identifiers, timestamps and terminal controls are retained for at least 37 days to prevent recovery from reviving deleted content; they do not retain erased content.

Making a collection private, moving content to a private destination, disabling uncollected visibility, trashing a Pick or deleting an account stops the corresponding future public reads. Deleting a collection requires a destination for all members, including Trash. Restores follow current visibility and require confirmation when making content public. Picky cannot recall copies already downloaded, shared, captured or retained by search engines. Background cleanup includes isolation and retry periods, so “no longer recoverable” does not mean every copy is instantly erased.

Settings lets you update your display name, bio and avatar, save account language, time zone and Pick card duration, view storage usage, request a ZIP export or confirm account deletion with an email code. Exports include profile data, collections, active and recoverable trashed Picks, text, stored media and checksums. Ready exports require sign-in and expire after 24 hours; related permanent deletion, expiry or account deletion invalidates them earlier. Username and sign-in email cannot currently be changed through self-service settings.

You can email official@picky.page to request access, a copy, correction or deletion of personal information, or account closure. Where applicable law provides these rights, you may also request data portability, restrict or object to particular processing, withdraw consent, and complain to a relevant data-protection authority. Account deletion immediately revokes all sessions and public access, followed by cleanup under the rules above. The username remains reserved.

We will verify your account and request to the extent necessary to avoid giving data to someone else. Where possible, contact us from your registered email and describe the data or action concerned. We will respond as required by applicable law and explain any request we cannot fully meet and available next steps. Do not send a sign-in code or password as proof of identity.

Picky uses encrypted network connections, authentication, and account-scoped access controls to protect transfers and private content, and restricts access to storage resources. Reading a private image requires an account-permission check. Our servers process content to store and display it; this is not an end-to-end encrypted service in which only you hold the keys.

No internet service can guarantee absolute security. Protect your email account and devices, and take care on shared computers. Report unauthorized access or data-security concerns to official@picky.page. If an incident requires notification by law, we will handle it and provide notice under the applicable requirements.

Because we use services such as Cloudflare, Resend, and Google, your information may be processed outside your country or region. Processing locations depend on the service used and its infrastructure. Where specific disclosures, separate consent, or other transfer safeguards are legally required, those requirements must be met; reading this policy does not replace them. You can contact us to ask about the relevant recipients and processing arrangements.

Picky’s general-purpose capture service is not specifically directed at children. Before a minor uses it, a parent or guardian should read this policy and the User agreement, and any parental-consent and other protection requirements under applicable law must be satisfied.

If you are a parent or guardian and believe a minor has provided personal information to Picky without the required consent, contact official@picky.page. We will investigate and take deletion or other protective measures as required.

We will publish updates on this page with an updated date. For material changes to processing purposes, methods, information categories, or your important rights, we will notify you through the website, email, or another appropriate channel and obtain renewed consent where required.

This policy is available in Simplified Chinese and English for ease of reading. We maintain both versions with the same intended meaning. For explanations, privacy requests, or complaints, contact 杭州丹悦科技有限公司 at official@picky.page.