This is the host for ReBind’s feedback widget.
ReBind collects design feedback on early-stage prototypes: reviewers pin notes directly onto a page, and the team building it works through them from a shared board.
Why is this script on a page I maintain?
If you found rebind-widget.js loading on your site, someone on your own team
added it to gather feedback during a review round. It is not an advertisement, not
analytics, and not a tracker. On load it talks to ReBind’s backend only to fetch the
review session it belongs to — the pins and statuses it draws — and it records
nothing until a reviewer submits feedback. It only works while that team’s review
session is open.
What it collects
- Only what a reviewer submits: the note they type, the name they enter, where on the page they pinned it, the page’s address and title, and — when capture succeeds — a screenshot of the visible page at that moment.
- Nothing about anyone else. Visitors who never open the widget are not recorded. It sets no cookies and loads no third-party trackers. A reviewer’s unsent draft, entered name, and receipts for their own submissions stay in their own browser’s local storage. The Privacy Policy’s reviewer section says where a submitted note goes and how to take it back.
How to remove it
Delete the <script> tag from your page — it will look like
this:
<script
src="https://widget.rebindit.com/v1/rebind-widget.js"
data-share-token="..."
data-api-url="..."
defer
></script>
In a Next.js app it appears as a <Script> component from
next/script instead, with the same src. Removing the tag removes
everything — nothing else was installed.