TRENCHCOAT
Website blueprint · 17 Oct 2026

es.pinterest.com

“Rabbit kisses”

Template-written 52 evidence items REA analysed 20 scripts
What this means for you

Pinterest talked to 7 outside services on a first visit, including 2 that measure visits or show ads.E6E8

  • Before you click anything, the page loads analytics or ad services: Pinterest Tag.E6E8
  • 8 cookies were set in your browser, all by the site itself.E15E16E17E18E19

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).

Calls its own backend /_/_/logClientError/, /_/_/csp_report/, /_/_/storage_report/E32E33E34E35
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What it is

  • The site describes itself as: “Two rabbits interacting closely. One rabbit is positioned above the other, with their heads touching. Love bunnies, Beautiful animals, Adora”E2
  • Notable building blocks in its code: GraphQL client.E26
  • In your browser it stores data in your browser's built-in database and saves small bits of data in your browser.E29E30
  • It has sections such as /pin, /ideas, /shopping, /_ and /password.E52
  • While loading, it called 17 endpoints on its own servers, such as /_/_/logClientError/, /_/_/csp_report/, /_/_/storage_report/ and 14 more.E32E33E34E35

Where your data goes

AdvertisingShow ads and follow you across sites to target them. 2
s.pinimg.comPinterest Tag: Pinterest ad tracking 90×E6
i.pinimg.comPinterest Tag: Pinterest ad tracking 9×E8
Sign-in & accountsLog you in or manage accounts. 1
accounts.google.comGoogle Sign-In: log in with Google 4×E7
Consent & bot protectionCookie banners, CAPTCHAs and bot checks. 1
www.recaptcha.netGoogle reCAPTCHA: bot check 3×E11
FontsDownload typefaces. 1
fonts.gstatic.comGoogle Fonts: fonts 3×E13
CDNs & hostingDeliver files (scripts, images) quickly from servers near you. 1
www.gstatic.comGoogle static files: Google's static file CDN 5×E12
Not identifiedServices we don't have in our list yet. 1
play.google.comnot identified 2×E14

How key features work

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/secure/unauth_user_data/, /resource/UserExperienceResource/get/, /resource/UserRegisterTrackActionResource/update/ and accounts.google.com).E35E41E47E7E27

/secure/unauth_user_data//resource/UserExperienceResource/get//resource/UserRegisterTrackActionResource/update/accounts.google.com

Loading its content

Its content loads from its own API while you browse (/_/_/logClientError/, /_/_/csp_report/, /_/_/storage_report/, /secure/unauth_user_data/ and 2 more).E32E33E34E35E36

/_/_/logClientError//_/_/csp_report//_/_/storage_report//secure/unauth_user_data//secure/arkose_data_exchange//resource/SearchTabResource/get/

Search

Search runs through /resource/SearchTabResource/get/ and /resource/AdvancedTypeaheadResource/get/.E37E39

/resource/SearchTabResource/get//resource/AdvancedTypeaheadResource/get/

How ads get picked

Ads are chosen through ad networks and exchanges (Pinterest Tag); they receive details about your visit to bid on the ad space.E6E8

Pinterest Tag

Saving data on your device

It saves data in your browser (IndexedDB (a browser database), localStorage and sessionStorage), so some things persist between visits.E29E30E23E24

indexeddblocal_storagelocalStoragesessionStorageIndexedDB

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
csrftokenE15es.pinterest.com about 365 daysthe site
_pinterest_sessE16pinterest.com about 360 daysthe site
_authE17pinterest.com about 360 daysthe site
_routing_idE18es.pinterest.com about 1 daysthe site
tstE19pinterest.com about 2 daysthe site
g_stateE20es.pinterest.com about 180 daysthe site
_bE21pinterest.com about 400 daysthe site
_irE22okra.pinterest.com about 0 daysthe site

localStorageE23: pid

sessionStorageE24: _bottomRightUpsellDismissed, HAS_SEEN_LOGIN_MODAL, SEEN_ACTION_UPSELL

IndexedDBE25: ContextLoggingDB, EventLoggingDB

Pages and API calls

Pages it links to

/pin//ideas/shopping/_/password

Endpoints

Called while loading (seen) or named in the code (code).

es.pinterest.com/_/_/logClientError/seenE32
es.pinterest.com/_/_/csp_report/seenE33
es.pinterest.com/_/_/storage_report/seenE34
es.pinterest.com/secure/unauth_user_data/seenE35
es.pinterest.com/secure/arkose_data_exchange/seenE36
es.pinterest.com/resource/SearchTabResource/get/seenE37
es.pinterest.com/_/graphql/seenE38
es.pinterest.com/resource/AdvancedTypeaheadResource/get/seenE39
es.pinterest.com/_/graphql/stream/seenE40
es.pinterest.com/resource/UserExperienceResource/get/seenE41
es.pinterest.com/resource/ApiCResource/create/seenE42
es.pinterest.com/resource/ApiResource/get/seenE43
es.pinterest.com/resource/ApiSResource/create/seenE44
es.pinterest.com/resource/ApiResource/create/seenE45
es.pinterest.com/_/_/trace/trace/seenE46
es.pinterest.com/resource/UserRegisterTrackActionResource/update/seenE47
es.pinterest.com/resource/ActivateExperimentResource/create/seenE48
/_/_/csp_report/codeE49
/v1/chooseServercodeE50
/v1/refreshCredscodeE51

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Rabbit kisses
page title · https://es.pinterest.com/pin/752241943979784383/
E2
Page description: Two rabbits interacting closely. One rabbit is positioned above the other, with their heads touching. Love bunnies, Beautiful animals, Adorable animal
page description · https://es.pinterest.com/pin/752241943979784383/
E3
Site name: Pinterest
page site_name · https://es.pinterest.com/pin/752241943979784383/
E4
Main heading: Welcome to Pinterest
page h1 · https://es.pinterest.com/pin/752241943979784383/
E5
29 request(s) to es.pinterest.com
types: 19 xhr, 6 fetch, 2 other
GET https://es.pinterest.com/pin/752241943979784383/ · xhr · 29 requests · network recording
E6
90 request(s) to s.pinimg.com
types: 85 script, 4 font, 1 stylesheet
GET https://s.pinimg.com/webapp/polyfills-d78c8b4f95c5ce67.mjs · script · 90 requests · network recording
E7
4 request(s) to accounts.google.com
types: 2 document, 1 script, 1 stylesheet
GET https://accounts.google.com/gsi/client · document · 4 requests · network recording
E8
9 request(s) to i.pinimg.com
types: 9 image
GET https://i.pinimg.com/736x/69/dd/a0/69dda024778a073baac6a74acb1f7b90.jpg · image · 9 requests · network recording
E9
2 request(s) to ct.pinterest.com
types: 2 document
GET https://ct.pinterest.com/ct.html · document · 2 requests · network recording
E10
1 request(s) to okra.pinterest.com
types: 1 script
GET https://okra.pinterest.com/v2/F5675B21-025B-4843-983C-38D86DEB394B/api.js · script · network recording
E11
3 request(s) to www.recaptcha.net
types: 2 script, 1 document
GET https://www.recaptcha.net/recaptcha/enterprise.js · script · 3 requests · network recording
E12
5 request(s) to www.gstatic.com
types: 2 script, 1 stylesheet, 1 image
GET https://www.gstatic.com/recaptcha/releases/4EDjxXf4knsx6UBM1L2V6cv8/recaptcha__en.js · script · 5 requests · network recording
E13
3 request(s) to fonts.gstatic.com
types: 3 font
GET https://fonts.gstatic.com/s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2 · font · 3 requests · network recording
E14
2 request(s) to play.google.com
types: 2 fetch
GET https://play.google.com/log · fetch · 2 requests · network recording
E15
Cookie 'csrftoken' set for es.pinterest.com
kept for about 365 days
cookie csrftoken on es.pinterest.com · value not stored
E16
Cookie '_pinterest_sess' set for pinterest.com
kept for about 360 days
cookie _pinterest_sess on pinterest.com · value not stored
E17
Cookie '_auth' set for pinterest.com
kept for about 360 days
cookie _auth on pinterest.com · value not stored
E18
Cookie '_routing_id' set for es.pinterest.com
kept for about 1 days
cookie _routing_id on es.pinterest.com · value not stored
E19
Cookie 'tst' set for pinterest.com
kept for about 2 days
cookie tst on pinterest.com · value not stored
E20
Cookie 'g_state' set for es.pinterest.com
kept for about 180 days
cookie g_state on es.pinterest.com · value not stored
E21
Cookie '_b' set for pinterest.com
kept for about 400 days
cookie _b on pinterest.com · value not stored
E22
Cookie '_ir' set for okra.pinterest.com
kept for about 0 days
cookie _ir on okra.pinterest.com · value not stored
E23
localStorage: 1 key(s) saved in your browser
localStorage keys: pid · values not stored
E24
sessionStorage: 3 key(s) saved in your browser
sessionStorage keys: _bottomRightUpsellDismissed, HAS_SEEN_LOGIN_MODAL, SEEN_ACTION_UPSELL · values not stored
E25
IndexedDB: 2 key(s) saved in your browser
IndexedDB keys: ContextLoggingDB, EventLoggingDB · values not stored
E26
GraphQL client found in the code
es.pinterest.com/ (page HTML) @ 2984:1019 · “__typename” · pattern scan
E27
Google Sign-In found in the code
es.pinterest.com/ (page HTML) @ 1:22134 · “accounts.google.com/gsi” · pattern scan
E28
reCAPTCHA found in the code
es.pinterest.com/ (page HTML) @ 2593:41 · “grecaptcha” · pattern scan
E29
Uses the browser ability: indexeddb
stores data in your browser's built-in database
okra.pinterest.com/v2/F5675B21-025B-4843-983C-38D86DEB394B/api.js @ 17:117606 · “indexedDB.open(” · pattern scan
E30
Uses the browser ability: local_storage
saves small bits of data in your browser
okra.pinterest.com/v2/F5675B21-025B-4843-983C-38D86DEB394B/api.js @ 17:114810 · “localStorage.setItem(” · pattern scan
E31
Uses the browser ability: web_worker
runs work in a background thread
www.gstatic.com/recaptcha/releases/4EDjxXf4knsx6UBM1L2V6cv8/recaptcha__en.js @ 763:243 · “new Worker(” · pattern scan
E32
The page called /_/_/logClientError/ on es.pinterest.com (POST)
POST https://es.pinterest.com/_/_/logClientError/ · xhr · network recording
E33
The page called /_/_/csp_report/ on es.pinterest.com (POST)
POST https://es.pinterest.com/_/_/csp_report/ · fetch · network recording
E34
The page called /_/_/storage_report/ on es.pinterest.com (POST)
POST https://es.pinterest.com/_/_/storage_report/ · fetch · network recording
E35
The page called /secure/unauth_user_data/ on es.pinterest.com (GET)
GET https://es.pinterest.com/secure/unauth_user_data/ · fetch · network recording
E36
The page called /secure/arkose_data_exchange/ on es.pinterest.com (GET)
GET https://es.pinterest.com/secure/arkose_data_exchange/ · fetch · network recording
E37
The page called /resource/SearchTabResource/get/ on es.pinterest.com (GET)
GET https://es.pinterest.com/resource/SearchTabResource/get/ · xhr · network recording
E38
The page called /_/graphql/ on es.pinterest.com (POST)
POST https://es.pinterest.com/_/graphql/ · fetch · network recording
E39
The page called /resource/AdvancedTypeaheadResource/get/ on es.pinterest.com (GET)
GET https://es.pinterest.com/resource/AdvancedTypeaheadResource/get/ · xhr · network recording
E40
The page called /_/graphql/stream/ on es.pinterest.com (POST)
POST https://es.pinterest.com/_/graphql/stream/ · fetch · network recording
E41
The page called /resource/UserExperienceResource/get/ on es.pinterest.com (GET)
GET https://es.pinterest.com/resource/UserExperienceResource/get/ · xhr · network recording
E42
The page called /resource/ApiCResource/create/ on es.pinterest.com (POST)
POST https://es.pinterest.com/resource/ApiCResource/create/ · xhr · network recording
E43
The page called /resource/ApiResource/get/ on es.pinterest.com (GET)
GET https://es.pinterest.com/resource/ApiResource/get/ · xhr · network recording
E44
The page called /resource/ApiSResource/create/ on es.pinterest.com (POST)
POST https://es.pinterest.com/resource/ApiSResource/create/ · xhr · network recording
E45
The page called /resource/ApiResource/create/ on es.pinterest.com (POST)
POST https://es.pinterest.com/resource/ApiResource/create/ · xhr · network recording
E46
The page called /_/_/trace/trace/ on es.pinterest.com (POST)
POST https://es.pinterest.com/_/_/trace/trace/ · xhr · network recording
E47
The page called /resource/UserRegisterTrackActionResource/update/ on es.pinterest.com (POST)
POST https://es.pinterest.com/resource/UserRegisterTrackActionResource/update/ · xhr · network recording
E48
The page called /resource/ActivateExperimentResource/create/ on es.pinterest.com (POST)
POST https://es.pinterest.com/resource/ActivateExperimentResource/create/ · xhr · network recording
E49
REA found the endpoint /_/_/csp_report/
how: call:fetch
es.pinterest.com/pin/752241943979784383/ @ 8:18 · “/_/_/csp_report/” · REA analyze-web-bundle 6.4.0
E50
The code names the endpoint /v1/chooseServer
www.gstatic.com/recaptcha/releases/4EDjxXf4knsx6UBM1L2V6cv8/recaptcha__en.js @ 426:307 · “/v1/chooseServer” · pattern scan
E51
The code names the endpoint /v1/refreshCreds
www.gstatic.com/recaptcha/releases/4EDjxXf4knsx6UBM1L2V6cv8/recaptcha__en.js @ 849:386 · “/v1/refreshCreds” · pattern scan
E52
6 links to pages on the same site
page links · https://es.pinterest.com/pin/752241943979784383/ · /pin, /, /ideas, /shopping, /_, /password

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • REA hit its size budget on parts of 3 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 4KzM1cWF.