Privacy
We don't store anything.
Pullsy is designed to process your content in real time and forget about it immediately. Here's exactly what we collect (almost nothing) and what we don't.
Last updated: 2026-07-04
The short version
We don't store your files, URLs, or personal data. We don't have user accounts. We don't set tracking cookies. We don't sell anything to anyone.
What we collect
Almost nothing. Specifically:
URLs you paste
Processed in real time. Never logged or stored.
Files you upload
Generated in your browser or serverless functions, immediately discarded. We do not retain them.
Server logs
Cloudflare collects standard access logs (IP, user agent, requested URL) for security and performance. Logs are rotated and discarded within 30 days.
One first-party metering cookie
We set a single first-party cookie called pullsy_aid to count your AI chat usage per recording. It expires after 1 year, contains no personal data, and is never shared with third parties.
Analytics
We may add privacy-respecting analytics in the future. We will not use tracking cookies, fingerprinting, or third-party ad networks.
The Chrome extension
The Pullsy Chrome extension (pullsy.online/extension) is a thin wrapper around the web recorder. Its privacy rules are the same as the rest of the site.
What the extension captures
Only the tab, window, or screen you explicitly pick from the popup. We never see other tabs, your browsing history, your bookmarks, your cookies, or your downloads. The "activeTab" permission grants access to the current tab only, only at the moment you click the toolbar icon.
Where recordings are stored
Recordings are uploaded to record.pullsy.online and stored in Cloudflare R2 (the same backend the web recorder uses). Free recordings are kept for 30 days, then deleted. Files are encrypted at rest by Cloudflare. The extension does not keep a local copy after the upload finishes.
The metering cookie
The same first-party pullsy_aid cookie described above also applies to the share pages opened from the extension.
No data selling, no third parties
The extension makes one outbound network request: the upload of your recording to record.pullsy.online. It does not contact analytics services, ad networks, error reporters, or any other origin. The full source is public and auditable.
Permissions, in detail
The full permission list with plain-language explanations is on the extension page. The Chrome Web Store listing also shows every permission and a one-line justification per item, as required by Google.
What we don't collect
Third-party services
A small number of services are used to make the site work:
Cloudflare
Hosting, CDN, DNS, and our CORS proxy. Cloudflare privacy policy.
Google Fonts
Typography. Google may log font requests to serve the Inter font.
Public fallback proxies
Used as a fallback when our own CORS proxy is unavailable. These services see the URLs you paste, not us.
Children's privacy
Pullsy is not directed at children under 13. We do not knowingly collect any information from children.
Changes to this policy
If we update this policy, we'll change the "Last updated" date above. Major changes will be noted on the homepage.
Contact
Questions? Email info@pullsy.online.