Fitkit — Privacy Policy
Effective date: September 25, 2026
Fitkit is a Chrome extension that finds and shops the items inside a Pinterest pin. This page explains, plainly and completely, what data Fitkit handles, where it goes, and what is never done with it.
The most important thing to know: Fitkit only processes a pin when you ask it to. Nothing is sent anywhere until you open the Fitkit popup on a Pinterest pin page and a scan runs (by default, Fitkit additionally waits for you to click "Search this pin"). Fitkit has no background monitoring of your browsing.
What data Fitkit handles, and why
| Data | Purpose | Where it goes |
|---|---|---|
| The image of the pin you scanned (fetched from Pinterest's own image CDN) | Detecting the wearable items (clothing, footwear, bags) in the pin | Fitkit's server (fitkit-api), which forwards it to the Google Gemini API |
| Cropped regions of that image (one per detected item) | Running a reverse image (Google Lens style) shopping search, which requires a publicly reachable image URL | Fitkit's server, then imgbb's image hosting. Each crop is publicly reachable by anyone with its link for a maximum of 10 minutes, after which imgbb automatically deletes it |
| The hosted crop URL | Finding merchant listings and prices for the item | Fitkit's server, then the selected search provider: SearchApi or Scrapingdog |
| The pin's page URL and pin ID | Identifying which pin a result belongs to, and caching its result locally | Stays on your device (see below) |
| Your settings (search provider, scan mode, currency-conversion toggle) | Remembering your choices | Stays on your device (see below) |
| Daily currency exchange rates | Optional conversion of non-USD prices into the USD total | Fetched from Frankfurter (a free exchange-rate API) via Fitkit's server. No Fitkit data is included in these requests |
What stays on your device
Fitkit stores your settings and a cache of scan results (including the pin
page URL) in chrome.storage.local. Cache entries expire after 24
hours and are deleted on expiry. Everything stored locally is removed when
you uninstall the extension. None of this local data is ever transmitted,
except the scan inputs listed in the table above while a scan is running.
The Fitkit server (fitkit-api)
Scans are routed through Fitkit's own server on Cloudflare Workers so that the extension ships with no API keys. The server:
- forwards your scan requests to the services listed in the table above and nothing else;
- does not store images, crops, or any other request content — scan data exists in memory only for as long as the request is being processed;
- logs only the request method, path, response status, and duration for reliability monitoring — never images, URLs, or identifiers;
- uses your IP address transiently, via Cloudflare, solely to enforce a rate limit that protects the shared API keys. The IP is not stored.
Third parties
The complete list of parties that can process your data as part of a scan:
- Cloudflare — hosts the Fitkit server and provides its infrastructure, including the IP-based rate limit described above.
- Google (Gemini API) — receives the pin image to detect items in it.
- imgbb — temporarily hosts item crops (auto-deleted after 10 minutes) so the search provider can fetch them.
- SearchApi / Scrapingdog — the shopping search provider selected in Fitkit's settings; receives the hosted crop URL to find matching merchant listings.
- Frankfurter — provides currency exchange rates; receives no Fitkit data.
These parties process Fitkit scan data solely to carry out the scan you requested. Fitkit does not transfer your data to any advertising platform, data broker, or information reseller.
What Fitkit never does
- Collects or transmits your browsing history. Fitkit reads only the Pinterest pin page you actively scan — nothing before, after, or on other sites.
- Requires an account, or collects names, email addresses, or any identifiers.
- Includes analytics, telemetry, trackers, or advertising of any kind.
- Sells, rents, or shares your data, or uses it for advertising, profiling, credit assessment, or any purpose other than running your scan.
- Reads, modifies, or injects anything into pages other than Pinterest pin pages, and on those it only reads the pin's image and URL.
Data retention summary
- Crops on imgbb: automatically deleted after 10 minutes.
- Fitkit server: nothing retained; logs contain no user data.
- On your device: settings (until changed or uninstalled) and scan results (24 hours).
Chrome Web Store Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Changes to this policy
If Fitkit's data practices change, this page will be updated and the effective date above revised before the change takes effect. The Chrome Web Store listing's privacy disclosures will be kept consistent with this page at all times.
Contact
Questions about this policy or Fitkit's data practices: contactfitkit8@gmail.com