Privacy policy
Last updated 16 October 2026
Koona Pin is a desktop app that keeps your bookmarks on your computer, and a browser extension for Chrome, Edge and Firefox that saves pages to it. The Safari extension comes inside the Mac app. Without Supporter, the app needs no account and no cloud; with Supporter, you sign in with a code sent to your email, for your plan and for sync. The developer does not receive your bookmarks; only feedback you choose to send reaches them, and, if you buy Supporter, the email of your purchase.
What the extension handles
When you click the Koona Pin button, the extension reads the address (URL) and title of the current tab. It reads no other tabs and no page content. Right after the click it shows a short note in the corner of that tab; the note reads nothing from the page. When you search your links from the extension, the words you type go to the app on this computer, the same way. If you turn on «Show that a page is already saved», the browser asks you for access to your tabs, and the extension then sends the address of each page you open to the app on this computer to check whether it is in your library; turning it off gives the access back.
Where it goes
The extension passes the address and title to the Koona Pin app on the same computer through the browser's native messaging. Until the app confirms a link, the link waits in the extension's local storage in your browser. The extension also keeps the time of the last save and the result of its last check of the app. Removing the extension or the browser profile deletes this data.
What the app keeps
The app stores your bookmarks, collections, tags, notes and the feeds you follow in a library file on your computer, and keeps local backup copies of it. It records which browsers saved links and when, to show the connection status.
Network requests
The extension makes none. The app connects to the website of a link you save or import, or whose preview you refresh, to read its title, description, preview image, icon and the name the site gives itself; that website sees an ordinary request from your computer. A new library does the same once for its starter links, pages on koona.app, firefox.com, bun.com and lunacyapp.com. When a site has no icon, the app asks Google's favicon service for one and sends it the site's domain name. When you start a link check, the app requests the address of each saved link once, without loading the page, to see whether it still opens; addresses on your computer or local network are not requested. Once a day the app asks koona.app whether a new version is out; the request carries nothing about you or your library, and koona.app and Cloudflare, which serves it, see your computer's address as with any website. Nothing is sent to the developer on its own: no analytics, no telemetry, no crash reports. If you follow feeds, see Feeds below.
Reading mode
When you open a link to read it in the app, the app requests that page from its website to show the article; while reading mode is open, it also requests the next article in the queue ahead of time. Pictures in the article load from the website, like previews. These are ordinary requests from your computer, as when your browser opens the page; addresses on your computer or local network are not requested. The fonts come with the app, so reading mode sends nothing else. If you save an article for offline reading, the app keeps its text and pictures in the library folder on your computer; copies are never uploaded, synced or included in exports, and you can remove them in Settings.
Feeds
If you follow a site's feed, the app requests that feed from the site directly, from your computer: when you follow it, then about once an hour, or as often as you choose in Settings, while the app is running. If you use several computers, each one requests it. The request carries no information about you beyond what any request from your computer does; the site sees your computer's address. When you paste a link into «New link», the app requests that page to show its preview and to see whether it names a feed; it requests the feed only if you choose to follow it. Posts are kept in a file beside your library on this computer and deleted after 30 days unless you save them; they are never uploaded, synced or included in backups and exports. A post you save becomes an ordinary bookmark. Pictures in posts load from their websites, as previews do. Addresses on your computer or local network are not requested. With Supporter sync on, the list of feeds you follow, with the names you gave them, travels between your computers like your bookmarks, encrypted end to end.
Feedback you send
«Send feedback» in the app and the feedback form on this website send the developer what you write: the type (bug, idea or question), your message and, if you give one, an email address for the reply. The app adds its version, the operating system version and the interface language, and — only if «Attach report» is ticked — the report shown in the dialog before sending: the capture status and, if capture fails, the system's error message with your user folder shortened, the protocol and versions of the extensions and when each browser last wrote; no links, titles, tags or notes. Nothing leaves your computer until you press Send. Messages are stored in a Supabase database in the European Union (Frankfurt) for up to 12 months and then deleted. The developer gets a Telegram notification with only the type, the versions and the length of the message — not its text, the email address or the report. Against spam, the function keeps the address of your connection for one day, only as a salted hash; Supabase, which hosts the database, also keeps short technical logs of requests with that address. To have a message deleted sooner, ask through Support on this website and say roughly when you sent it.
Supporter
If you buy Supporter, the optional subscription, Paddle.com, our reseller and merchant of record, takes the payment and keeps your payment details; we never see your card. Our server (Supabase, European Union, Frankfurt) keeps the email of your purchase, your Paddle customer and subscription IDs and the state of your subscription, so that the app knows your plan and you can sign in on another computer with a code that Cloudflare Email sends to that address. The app asks this server only while a purchase waits for its payment, once a day in the last days of a paid period, when you sign in or out, and, while sync is on, for a fresh sign-in token to connect to the relay. Your bookmarks never go to this server; sync carries them, encrypted, through the relay described below. To close the account and have this data deleted, write to support@koona.app; Paddle keeps its records of the payment for as long as the law requires.
Sync
With Supporter, you can turn on sync: your library, including the Reading list, reading progress and the list of feeds you follow, travels between your computers through our relay, a Cloudflare Worker. It is encrypted end to end with a key that only your computers have, so the relay can neither read nor change it. The relay keeps only the list of your computers (for each, an ID, a public key, the name you gave it, its status and when it was last seen), which of them is the main one, and the number of the current key. It stores nothing for a computer that is offline; that computer catches up when it is back. Cloudflare sees your computer's address, as with any website. Turning sync off on a computer stops it there; that computer's library and its place on your account stay. When the main computer removes a computer, that computer's sync stops and your other computers get a new key; its library stays on it.
This website
koona.app/pin is delivered through Cloudflare. Cloudflare Web Analytics counts visits to the site without cookies; the server keeps short access logs of the pages it served, without your IP address.
Sharing
Your data is not sold, shared or transferred to anyone, and is not used for anything other than saving and showing your bookmarks.