Recent revision added detail on uses, retention and transfers
Pinterest says it revised this notice to add more detail about how it uses information to improve its products and services, how long it keeps information, and changes to its international data transfer mechanisms. This summary does not itself state when the changes took effect or list the earlier wording.
Supporting quotations
We added more details about the ways in which Pinterest uses your information in order to improve its products and services, how long we keep your information, and changes to our international data transfer mechanisms.
Qualifications & exceptions
The summary describes the kinds of changes only; the specific new or removed wording is not identified.
Not stated here
The date of these changes is not stated in the summary; the page separately shows a last-updated month (carded with the change clause).
The prior version of the notice is not supplied.
Data Access & Collection · Company practice
Who this notice covers: people without Pinterest accounts
This notice is addressed to "Non-Users": people who do not use Pinterest and/or do not have a Pinterest account. Pinterest says it processes certain limited information about them in two situations: when it receives that information from its users as they create Pins, or when it uses licensed, publicly available information. Pinterest states it processes this information even though the person is not a user or account holder.
Supporting quotations
processes certain limited information if we receive it from our users when they create Pins on the Pinterest app or where we use licensed, publicly available information
We process this information even if you are not a user of Pinterest and/or do not have an account with us (a “Non-User”).
Information for people who don’t use Pinterest and/or have Pinterest accounts
Qualifications & exceptions
The notice describes the information as "certain limited information" and ties it to two sources: users creating Pins and licensed, publicly available information; cookies are described separately for Non-Users who visit the website.
The section heading reads "and/or have Pinterest accounts", while the defining sentence says "do not have an account"; the defining sentence is used for scope here.
Not stated here
The notice does not list the specific categories of personal data received from users or from licensed public sources.
Data Access & Collection · Company practice
Pins made by users may include images of people who are not users
Users create Pins by uploading their own images or videos and can also save images they find online as Pins. Pinterest says its Community Guidelines do not allow content that reveals personal or sensitive information, including photos of private people who do not want them posted online, but it acknowledges that Pins created by users may still include images of Non-Users. This is how a Non-User's image can end up on Pinterest without that person having an account.
Supporting quotations
do not allow content that reveals personal or sensitive information, including photos of private people that they don’t want posted online
However, it is possible that Pins created by users may include images of Non-Users.
Users can create their own Pins by uploading images or videos from their computer or mobile device. In addition to creating Pins with their own images and videos, users can save images they find online as Pins.
Qualifications & exceptions
The Community Guidelines restriction covers personal or sensitive information, including photos of private people that they do not want posted online; it does not say every image of a Non-User is prohibited.
The notice says such images are "possible", not that Pinterest seeks them out.
Not stated here
The Community Guidelines are linked but not supplied, so their full rule and enforcement are not reviewed here.
Data Access & Collection · Company practice
Cookies collect information when a Non-User visits the website
Pinterest collects information through cookies and similar technologies, as explained in its Cookie Policy. The notice ties this specifically to a Non-User visiting the website: in that case Pinterest also processes information through cookies and similar technologies.
Supporting quotations
We collect information through cookies and similar technologies as explained in our
Where a Non-User visits the website, we also process information through cookies and similar technologies as explained in our
Qualifications & exceptions
The cookie processing for Non-Users is stated for visits to the website.
Not stated here
The Cookie Policy is linked (two different link addresses appear) but not supplied, so which cookies are set, what they collect and the available choices are not reviewed here.
Data Access & Collection · Company practice
Licensed public data from sites such as GitHub may include Non-Users
Pinterest also collects licensed, publicly available information through third-party websites, giving GitHub as an example. It says this information may contain information about Non-Users.
Supporting quotations
We also collect licensed, publicly available information through third-party websites such as GitHub. It is possible that this information may contain information about Non-Users.
Qualifications & exceptions
GitHub is an example ("such as"), not the full list of third-party sources.
Not stated here
Which other third-party websites are used, what the licensed information contains and the license terms are not stated.
The notice does not say for which listed purpose this licensed information is used.
Use & Processing · Company practice
Non-User information is used to provide the service, such as recommendations
Pinterest uses Non-User information, including images of Non-Users in Pins, to provide the Pinterest service to its users, for example to recommend content.
Supporting quotations
We use Non-User information, including images of Non-Users in Pins, to
provide the Pinterest service to users, for example, to recommend content;
Qualifications & exceptions
Recommending content is given as an example, not the only service use.
Use & Processing · Company practice
Images of Non-Users in Pins train machine learning models, whenever posted
As part of improving its services, Pinterest says it uses Non-User images in Pins to train its machine learning models and to provide new product features, such as the body type ranges tool. This applies regardless of when the Pin was posted, so older Pins are included. The notice also says Pinterest has features supported by generative artificial intelligence technology, and lists improving and developing product features such as inclusive body type ranges among the interests it relies on.
Supporting quotations
we use Non-User images in Pins, regardless of when the Pin was posted, to train our machine learning models and provide new product features like the
Pinterest also has features that are supported by generative artificial intelligence technology.
our interest and the interests of Pinterest’s users in improving, promoting and developing the Service and in product features, such as Pinterest’s inclusive body type ranges, in an informed way.
Qualifications & exceptions
"Regardless of when the Pin was posted": the training use is not limited to Pins posted after any date.
The notice mentions generative AI features but does not say directly whether Non-User images are used for them.
Not stated here
The linked AI help page and body type ranges article are not supplied.
The notice does not say whether a Non-User can exclude their image from model training other than by requesting removal of a personal image.
Use & Processing · Company practice
Non-User information is used to improve services, for safety and to protect legal interests
Pinterest also uses Non-User information, including images of Non-Users in Pins, to improve its services, keep its users and the public safe, and protect legal interests.
Supporting quotations
to improve our services, keep our users and the public safe, and to protect legal interests.
Qualifications & exceptions
The notice does not limit "legal interests" to Pinterest's own interests.
Not stated here
The specific safety or legal activities are not described beyond these purposes.
Use & Processing · Company practice
Non-User information is used to personalize ads shown to users
Pinterest uses Non-User information, including images of Non-Users in Pins, to personalize the ads that its users see. The ads are shown to users, not to the Non-User.
Supporting quotations
to personalize ads users see.
Not stated here
How Non-User information feeds ad personalization, and whether any of it is shared with advertisers, is not stated.
Legal Rights & Agreement Rules · Company practice
EEA, Swiss and UK Non-Users: processing to meet legal obligations
For Non-Users in the EEA, Switzerland or the UK, the notice says information is used to comply with Pinterest's legal obligations. Its examples are regulatory duties such as those under privacy law (GDPR) and the Digital Services Act, and civil, commercial, criminal or consumer protection matters where Pinterest receives a court order to disclose information for court proceedings or regulatory inquiries, such as orders or mandatory requests under the Irish Competition and Consumer Protection Act 2014 or the GDPR. Separately, the notice says it only discloses information in response to law enforcement and similar requests if it believes disclosure is reasonably necessary for listed reasons.
Supporting quotations
If you are a Non-User in the EEA, Switzerland, or UK, use information to comply with our legal obligations.
Regulatory matters: to comply with regulatory obligations like under privacy laws (GDPR) and the Digital Services Act (DSA).
where we are in receipt of a court order to disclose information for the purposes of court proceedings or regulatory inquiries
We only disclose information in response to such requests if we believe that disclosure is reasonably necessary to comply with a law, regulation or legal request
Qualifications & exceptions
This legal-obligation basis is stated for Non-Users in the EEA, Switzerland or UK.
The listed laws are examples, not a complete list.
The sentence omits its subject ("use information to comply"); it is read as Pinterest using the information.
Not stated here
The cited laws (GDPR, Digital Services Act, Irish Competition and Consumer Protection Act 2014) are named but not supplied or interpreted here.
Legal Rights & Agreement Rules · Company practice
Legitimate interests of Pinterest and its users as a basis for processing
Pinterest says it relies on its own legitimate interests and those of its users to process Non-User information for the purposes described. The interests it lists are: operating and providing Pinterest, and users' interest in creating Pins; offering users a personalized, unique and relevant service; helping users make connections; securing its systems and fighting spam, threats, abuse or infringement; making sure the service is used according to its Terms; and improving, promoting and developing the service and product features. Where Pinterest relies on legitimate interests, the notice elsewhere says Non-Users may, depending on where they reside, have a right to object to or restrict that processing.
Supporting quotations
We rely on our legitimate interests and the legitimate interests of our users to process your information for the purposes described above.
our legitimate interests in operating and providing Pinterest to our users, and the interests of our users in creating Pins on Pinterest.
our interest and the interest of Pinterest users to receive a personalized, unique and relevant offering, as this is why users come to the Service.
our interest to help users make connections in order to deliver a relevant and unique Service.
our interest and the interest of Pinterest users to secure Pinterest systems and fight spam, threats, abuse or infringement activities and promote safety and security on Pinterest.
our interest and the interests of Pinterest users to ensure our Services are used in accordance with our Terms.
the right to restrict and object to certain processing of your information where we rely on legitimate interests to process your information
Qualifications & exceptions
The interests include those of Pinterest's users, not only Pinterest's own.
The right to object or restrict applies depending on where the person resides and under applicable data protection laws.
Not stated here
The notice does not describe how these interests were balanced against Non-Users' interests.
The Terms referenced as a basis are not supplied.
Legal Rights & Agreement Rules · User right or choice
Non-Users may have rights to access, correct, port, erase, restrict and object
Depending on where they reside, Non-Users may be able to exercise rights under applicable data protection laws. The notice lists the right to access, rectify, port and erase their information, and the right to restrict and object to certain processing where Pinterest relies on legitimate interests. People in the EEA, UK or Switzerland can also contact Pinterest's Data Protection Officer to exercise any other privacy right. For EEA, Swiss and UK residents, Pinterest Europe Ltd. is the controller responsible for handling the exercise of data subject rights.
Supporting quotations
Depending on where you reside, you may be able to exercise your rights under applicable data protection laws.
These rights include the right to access, rectify, port and erase your information, as well as the right to restrict and object to certain processing of your information where we rely on legitimate interests to process your information.
If you are located in the EEA, UK or Switzerland, you can also contact our
How Non-Users can exercise their rights
In terms of fulfilling the key obligations under the GDPR, including the exercise of data subject rights, Pinterest Europe Ltd is the responsible controller.
Qualifications & exceptions
"Depending on where you reside" and "may be able to": these rights are not stated as available everywhere.
The right to restrict and object is tied to processing based on legitimate interests.
The Data Protection Officer route is stated for people located in the EEA, UK or Switzerland.
Not stated here
The notice gives no response time, verification steps or fee for rights requests other than image removal.
The Data Protection Officer contact form is linked but not supplied.
Request removal of a personal image by email or form; the email is used only to identify you
A Non-User can ask Pinterest to remove a personal image of them from Pinterest by emailing privacy-support@pinterest.com or using the linked contact form (report policy violation; report exposed personal information). Pinterest says the email address provided will only be used to identify the person as a Non-User who objected to the inclusion of their personal image on Pinterest. The retention section adds that when the person verifies they are the person in the Pin, Pinterest deletes the Pin within 30 days, and that complaint emails and support tickets are kept for two years.
Supporting quotations
Please use this email privacy-support@pinterest.com or
to request that a personal image of you is removed from Pinterest.
The email address you provide us with will only be used to identify you as a Non-User that has objected to the inclusion of their personal image on Pinterest.
When Pinterest receives a request from a data subject to delete a Pin and the data subject verifies they are the person in the Pin, Pinterest deletes the Pin within 30 days.
Qualifications & exceptions
Deletion within 30 days follows a request where the data subject verifies they are the person in the Pin.
The email address is kept for two years with the complaint record (see the retention card).
Legal Rights & Agreement Rules · User right or choice
EEA, Swiss and UK residents can complain to their data protection authority
If you reside in the EEA, Switzerland or the UK, you have the right to lodge a complaint with the supervisory authority of your country. The notice names the UK Information Commissioner's Office and Ireland's Data Protection Commission and gives their postal addresses, phone numbers and email addresses (and an online form for the Irish authority).
Supporting quotations
If you reside in the EEA, Switzerland, and UK, you have the right to lodge a complaint with the supervisory authority of your country.
In the UK, the relevant data protection authority is the Information Commissioner's Office
In Ireland, the relevant data protection authority is the Data Protection Commission
Qualifications & exceptions
This right is stated for residents of the EEA, Switzerland and the UK; only the UK and Irish authorities are named.
Not stated here
Authorities for other EEA countries and Switzerland are not listed.
Retention & Deletion · Company practice
Pins stay as long as the creator's account exists unless a verified removal request is made
Unless the person in a Pin asks for it to be deleted and verifies their identity (in which case Pinterest deletes it within 30 days), Pinterest keeps Pins for as long as the account of the user who created the Pin exists. In some cases Pinterest needs to keep Pins longer for other legitimate purposes, such as complying with legal obligations, enforcing and preventing violations of its Terms, fighting spam, or protecting or defending its rights, property and users. Those longer storage periods are decided case by case.
Supporting quotations
Otherwise, Pinterest retains Pins for as long as the account of the Pinterest user who created the Pin is in existence.
In certain cases, we need to keep Pins for longer for other legitimate purposes, such as complying with legal obligations, enforcing and preventing violations of our Terms, fighting spam, or protecting or defending our rights, property and users.
The storage periods are determined on a case-by-case basis.
Qualifications & exceptions
Longer retention is "in certain cases" for the listed kinds of purposes ("such as"), and its length is decided case by case.
Not stated here
Whether case-by-case longer retention can also apply after a verified deletion request is not stated.
No maximum period is given for case-by-case retention.
Retention of Non-User data used for model training or obtained from licensed public sources or cookies is not stated in this section.
Retention & Deletion · Company practice
Complaint email and support ticket content are kept for two years
When a Non-User submits a complaint, Pinterest keeps limited personal data of the complainant, namely their email address and the content of support tickets, for two years. Pinterest says it keeps it that long in case the requests are not resolved and the correspondence is needed to handle resulting complaints; in that case the correspondence is kept while those complaints are being resolved. The rights section points to this section for how long the email address is kept.
Supporting quotations
When a Non-User submits a complaint to Pinterest, Pinterest retains limited personal data of the complainant which includes their email address, plus the content of support tickets for two years.
In such cases, the correspondence is then retained while those complaints are being resolved.
To find out more about how long we keep your email address see the
How long we keep your information
Qualifications & exceptions
Retention can extend beyond two years while resulting complaints are being resolved.
Sharing & Disclosure · Company practice
Information is shared within Pinterest's companies and moved to countries like the US
Pinterest says Non-User information will be shared with its family of companies. As a result it will be transferred to, or stored and processed in, countries outside the EEA, Switzerland or UK (such as the United States) for the purposes described in the notice.
Supporting quotations
Your information will be shared with our families of companies.
third countries (like the United States) outside of the EEA, Switzerland, or UK for the purposes described.
Qualifications & exceptions
The transfer is for "the purposes described" in this notice.
Not stated here
The companies in the family of companies are not named, other than Pinterest Europe Ltd. and Pinterest, Inc. as joint controllers.
The full list of destination countries is not given.
Sharing & Disclosure · Company practice
Transfers rely on adequacy decisions or standard contractual clauses
Pinterest lists safeguards it relies on for transfers. It transfers information to some countries that have a European Commission adequacy decision (or an equivalent decision under other laws). For transfers to third parties in countries without an adequacy decision, it relies on standard contractual clauses approved by the European Commission and their UK and Swiss equivalents. The notice also says it relies on the Data Privacy Frameworks for transfers to the US (separate card).
Supporting quotations
Safeguards which we rely on in ensuring your information benefits from an adequate level of protection includes the following:
to some countries with such adequacy decisions
We rely on standard contractual clauses to transfer information as described in “How we use the info we collect” to third parties in countries without an adequacy decision.
Qualifications & exceptions
The SCC statement refers to transfers "to third parties", which indicates recipients beyond Pinterest's own companies, but the notice does not identify them.
The SCC transfers are described "as described in “How we use the info we collect”", a section title that does not appear in this notice; the nearest section is "How do we use a Non-User’s information?".
Not stated here
The linked list of adequacy countries is not supplied.
Which third parties receive data under SCCs is not stated.
The cited GDPR articles (45 and 46) are named, not supplied or interpreted.
Sharing & Disclosure · Company commitment
Pinterest relies on the EU, UK and Swiss Data Privacy Frameworks for US transfers
For transfers of personal data of EEA, Swiss and UK (and Gibraltar) residents to the US, Pinterest says it relies on, and has certified to the U.S. Department of Commerce that it adheres to, the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework. It says Pinterest Inc. complies with them. Questions or complaints about data received under these frameworks should first go to Pinterest Inc. at privacy-support@pinterest.com, with further steps described below in the notice.
Supporting quotations
For transfers of personal data of EEA, Switzerland, and UK (and Gibraltar) residents to the U.S., Pinterest relies and has certified to the U.S. Department of Commerce that it adheres to
Pinterest Inc. complies with Data Privacy Frameworks.
should first contact Pinterest Inc. at privacy-support@pinterest.com.
Qualifications & exceptions
The frameworks cover transfers of EEA, Swiss and UK (and Gibraltar) residents' data to the US.
Not stated here
The certification and program site are linked but not supplied.
Sharing & Disclosure · Company practice
Disclosure to law enforcement, government and researchers
Pinterest may share Non-User information with law enforcement agencies, government agencies, researchers or other parties in compliance with laws, rules or regulations. It says it only discloses information in response to such requests if it believes disclosure is reasonably necessary to comply with a law, regulation or legal request; to protect the safety, rights or property of the public, any person or Pinterest; or to detect, prevent or otherwise address fraud, security or technical issues. It may also share information if it believes this is necessary to prevent imminent and serious bodily harm to a person in an emergency. Separately, it may share publicly accessible information with independent researchers who meet certain criteria, to combat societal harms.
Supporting quotations
We may also share your information with law enforcement agencies, government agencies, researchers, or other parties in compliance with laws, rules, or regulations.
We only disclose information in response to such requests if we believe that disclosure is reasonably necessary to comply with a law, regulation or legal request; to protect the safety, rights, or property of the public, any person, or Pinterest; or to detect, prevent, or otherwise address fraud, security or technical issues.
We may also share information if we believe it is necessary to prevent imminent and serious bodily harm to a person in emergency situations.
We may share your publicly accessible information with independent researchers who meet certain criteria, to combat societal harms.
Qualifications & exceptions
The disclosure test is Pinterest's own belief that disclosure is reasonably necessary for one of the listed reasons.
Researcher sharing is limited to publicly accessible information and to independent researchers who meet certain criteria, for combating societal harms.
Not stated here
The researcher criteria are not described.
The Law Enforcement Guidelines are linked but not supplied.
The notice does not say whether Non-Users are notified of disclosures.
Sharing & Disclosure · Restriction or exception
Some transfers rely on legal exemptions instead of standard contractual clauses
Transfers to countries without an adequacy decision typically rely on standard contractual clauses, but in certain circumstances they can rely on exemptions provided under data protection law. The notice's example is sharing with law enforcement in emergency situations where Pinterest learns that a person's life is at risk.
Supporting quotations
While transfers to countries that don’t have an adequacy decision typically take place on the basis of SCCs, in certain circumstances, transfers can also take place on the basis of exemptions provided under data protection law.
For example, sharing with law enforcement, in emergency situations where we learn that a person’s life is at risk.
We rely on standard contractual clauses to transfer information as described in “How we use the info we collect” to third parties in countries without an adequacy decision.
These are decisions issued from the European Commission under Article 45 GDPR (or equivalent decisions under other laws) where they recognise that a country offers an adequate level of data protection.
Qualifications & exceptions
"In certain circumstances": exemptions are not the default basis; the example given is an emergency where a life is at risk.
Not stated here
Which data protection law exemptions are used is not specified.
Cross-references
narrows (model-proposed): Transfers rely on adequacy decisions or standard contractual clauses — exception_to: In certain circumstances, such as life-at-risk emergencies involving law enforcement, transfers to countries without an adequacy decision rely on legal exemptions instead of standard contractual clauses.
Legal Rights & Agreement Rules · Procedure
DPF complaints go to Pinterest first, then free JAMS dispute resolution
Under the Data Privacy Frameworks, Pinterest Inc. commits to resolve complaints about its collection and use of personal data received under them. EU, UK and Swiss individuals should first contact Pinterest Inc. at privacy-support@pinterest.com. Pinterest Inc. commits to refer unresolved complaints to JAMS, a US alternative dispute resolution provider; if you do not get timely acknowledgment or your complaint is not addressed to your satisfaction, you can go to JAMS, at no cost to you. The Federal Trade Commission has jurisdiction over Pinterest Inc.'s compliance, and under certain conditions binding arbitration may be available for complaints not resolved by the other mechanisms.
Supporting quotations
In compliance with the Data Privacy Frameworks, Pinterest Inc. commits to resolve DPF Principles-related complaints about our collection and use of your information.
EU, UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the Data Privacy Frameworks should first contact Pinterest Inc. at privacy-support@pinterest.com.
Pinterest Inc. commits to refer unresolved complaints concerning our handling of personal data received in reliance on the Data Privacy Frameworks to JAMS, an alternative dispute resolution provider based in the United States.
The services of JAMS are provided at no cost to you.
The Federal Trade Commission has jurisdiction over Pinterest Inc’s compliance with the Data Privacy Frameworks.
Under certain conditions, it may be possible to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms
Qualifications & exceptions
This route covers complaints about personal data received in reliance on the Data Privacy Frameworks, by EU, UK and Swiss individuals.
Binding arbitration is possible only "under certain conditions" and for complaints not resolved by the other DPF mechanisms.
Not stated here
The conditions for binding arbitration are in a linked framework annex that is not supplied.
What counts as a timely acknowledgment is not defined.
Legal Rights & Agreement Rules · Company commitment
Pinterest Inc. stays responsible for agents that mishandle DPF data
Pinterest Inc. says it remains responsible if an agent acting on its behalf processes personal information in a way inconsistent with the DPF Principles, unless Pinterest Inc. is not responsible for the event giving rise to the damage.
Supporting quotations
Pinterest Inc. remains responsible if its agent, when acting on its behalf, processes personal information in a manner inconsistent with the DPF Principles, unless it is not responsible for the event giving rise to the damage.
Qualifications & exceptions
The responsibility does not apply where Pinterest Inc. is not responsible for the event giving rise to the damage.
Stated in the Data Privacy Frameworks section.
Not stated here
The agents are not identified.
Legal Rights & Agreement Rules · Context
Pinterest Europe Ltd. and Pinterest, Inc. are joint controllers for EEA, Swiss and UK residents
For GDPR purposes, if you are resident in the EEA, Switzerland or the UK, Pinterest Europe Ltd. (an Irish company in Dublin) and Pinterest, Inc. (a US company in San Francisco) are joint data controllers of your personal data. Pinterest Europe Ltd. is the controller responsible for the key GDPR obligations, including the exercise of data subject rights. Questions about data processing go to Pinterest Europe Ltd., and you can also contact the Data Protection Officer.
Supporting quotations
For the purposes of the GDPR, if you are resident in the EEA, Switzerland, and UK, Pinterest Europe Ltd. and Pinterest, Inc. are joint data controllers of your personal data.
In terms of fulfilling the key obligations under the GDPR, including the exercise of data subject rights, Pinterest Europe Ltd is the responsible controller.
If you have any questions about our data processing activities, please contact Pinterest Europe Ltd.
Qualifications & exceptions
The joint-controller statement is made for residents of the EEA, Switzerland and the UK.
Not stated here
The controller for Non-Users outside those regions is not stated in this notice.
No email address for Pinterest Europe Ltd. is given here; the notice gives its registered office address and the linked Data Protection Officer form, which is not supplied.
Legal Rights & Agreement Rules · Procedure
Pinterest may change this notice by posting changes on the page; last updated April 2025
Pinterest may change this notice from time to time and says it will post any changes on this page. The page states it was last updated in April 2025.
Supporting quotations
We may change this Notice from time to time, and if we do, we’ll post any changes on this page.
Last updated: April 2025
Qualifications & exceptions
The stated method is posting on this page; no other notice to Non-Users is described.
Not stated here
Whether changes take effect on posting or later is not stated.
The exact day of the April 2025 update is not given.