Privacy Policy
Last updated: June 4, 2026We believe in minimal data collection. This policy explains what we collect, why we need it, and how long we retain it.
Data Collection Overview
| Data Type | Purpose | Retention Period |
|---|---|---|
| Account Data | Authentication (Username, Password Hash, Email) | Until account deletion |
| Paste Content | Core service functionality | Until deleted (Guest: 30 days) |
| Technical Data | Abuse prevention (SHA-256 IP Hash) | Indefinite (hashes cannot be reversed) |
| Rate Limits | DDoS & Spam prevention | 1–60 minutes |
| Session Cookies | Keeping you logged in securely | 7 days rolling |
1. How We Use Your Information
- To provide, operate, and maintain the Service.
- To detect, prevent, and mitigate abuse, spam, and illegal activity.
- To respond to legal requests, including DMCA notices.
2. Data Storage & International Transfers
Your data is stored in Cloudflare D1 databases distributed globally via Cloudflare's edge network. By using the Service, you consent to your data being transferred to and processed on Cloudflare's international infrastructure. We do not sell your data to third parties, nor do we run third-party advertising scripts. Cloudflare processes network request metadata in accordance with their Privacy Policy.
3. Use of Cookies
We use strictly necessary cookies for session management (logging in) and storing your cookie consent preference. We do not use analytics or marketing cookies. For more details, review our Cookie Policy.
4. Data Sharing
We will not disclose your personal information unless required by law, a court order, or to prevent imminent physical harm or illegal activities (such as sharing CSAM, which will be reported to appropriate authorities).
5. Your Global Privacy Rights
We respect international privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). You have the right to access, rectify, or completely erase your personal data. You can perform basic deletions (like deleting pastes) while logged in. To request full account erasure, please contact us via the contact form. Requests are processed within 30 days.
6. Children's Privacy
Our Service is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13.