Geshop Privacy Policy

Last updated: 2 November 2026

1. Who operates Geshop

Geshop is a personal, single-user application operated by Thoriq Wildianto, under the names THOWILD and Gesho Affiliate ("we", "the operator"). Geshop is used only by the operator to manage the operator's own Pinterest account, @geshoAffiliate. It is not a public service and has no other users.

2. What data Geshop accesses

After the operator signs in with Pinterest and approves access on Pinterest's OAuth authorization page, Geshop can access the following data from the operator's own Pinterest account, limited to the scopes approved:

• Account information (for example username and profile information) — user_accounts:read
• Boards owned by the account — boards:read, and board creation where approved — boards:write
• Pins owned by the account — pins:read, and Pin creation and publishing where approved — pins:write

Geshop does not access data from any Pinterest account other than the account that authorized it, and it does not collect personal data from visitors to this website. This website is a static site: it has no user accounts, no sign-up forms, no comment forms, and sets no tracking cookies of its own.

3. How the data is used

Pinterest account data accessed through the API is used only to operate the tool for its stated purpose: planning content, and creating, scheduling, and publishing Pins and boards on the operator's own account, and reviewing the account's own content and performance.

4. Storage and security

OAuth access tokens are credentials, not content. They are held in the secure credential storage of the platform used to run Geshop, are used only to make authorized Pinterest API calls, and are never published on this website or in its source code. No Pinterest App Secret or OAuth token is stored in this website's files. Pin content that Geshop publishes (titles, descriptions, images, and destination links) is content the operator intends to publish publicly on Pinterest.

5. Sharing

Geshop does not sell personal data. Data is sent to Pinterest's own API in order to perform the actions described above. This static website is hosted on GitHub Pages; GitHub may process standard server logs (such as IP addresses) as the hosting provider, under GitHub's own privacy policy.

6. Revoking access and deletion

Access can be revoked at any time by the account owner in Pinterest's account settings (Apps / authorized apps), which immediately stops Geshop from making further API calls for that account. To request deletion of any data held in connection with Geshop, contact the operator using the details on the contact page. Because Geshop is a single-user tool for the operator's own account, requests from the account owner are handled directly and promptly.

7. Changes to this policy

If this policy changes, the updated version will be published on this page and the "Last updated" date above will be revised.

8. Contact

Questions about this policy can be sent via the Geshop contact page.