Privacy Policy

Account information. When you create an account, we collect your email address and a username. Your password is securely hashed before storage — we never store plaintext passwords.

Content you publish. We store the HTML pages you create and publish, along with any images you upload. This content is necessary to operate the hosting service.

Usage data. We collect aggregate page view counts for your published pages. These counts are stored as simple numeric totals — we do not track or store information about individual visitors to your pages.

Payment information. If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card number or full payment details on our servers. See Section 05 for more information.

We use the information we collect to:

• Provide, maintain, and improve the PastePage service.
• Authenticate your identity and secure your account.
• Host and serve the pages and images you publish.
• Process payments and manage your subscription.
• Send transactional emails (password resets, account notifications).
• Enforce our Terms of Service and respond to abuse reports.
• Analyze usage patterns and measure the effectiveness of the Service using analytics tools.
• Deliver, measure, and improve advertising campaigns on third-party platforms (e.g., social media, search engines).

We do not sell or rent your personal information to third parties. We may share limited data with advertising and analytics partners as described in Section 03 and Section 05.

Authentication cookies. When you sign in, we set a session cookie to keep you authenticated. This cookie is essential for the service to function and cannot be disabled.

Page password cookies. When you access a password-protected page, a signed session cookie is set for that specific page so you don't have to re-enter the password on each visit. These cookies are cleared when you close your browser.

Local storage. We use browser local storage to remember your theme preference (light or dark mode). No tracking data is stored.

Analytics and advertising cookies. We may use third-party analytics tools (such as Google Analytics) and advertising pixels (such as Meta Pixel, Google Ads, or similar technologies) to measure site usage, track conversions, and improve our advertising. These tools may set cookies on your browser and collect information such as your IP address, browser type, pages visited, and referring URL. This data is used to analyze trends, measure ad performance, and improve the Service — not to build a personal profile of you. You can manage or disable these cookies through your browser settings. You may also opt out of personalized advertising through Google Ads Settings, Meta Ad Preferences, or the Digital Advertising Alliance opt-out page.

Your data is stored on Cloudflare's global infrastructure. All data is transmitted over HTTPS. Passwords are securely hashed before storage. We use cryptographically signed cookies to prevent tampering.

We use the following third-party services to operate PastePage. Each service has access only to the data necessary for its function:

Cloudflare

Infrastructure and hosting. Processes requests to serve your pages and may collect standard web server logs (IP addresses, request timestamps).

Stripe

Payment processing. Handles subscription billing and stores your payment method securely. We receive only your subscription status — not your card details.

Resend

Email delivery. Processes your email address to deliver transactional emails such as password resets.

Analytics providers

We may use services such as Google Analytics on pastepage.com (the dashboard and marketing site) to understand how the Service is used. We do not inject analytics scripts into user-published pages at username.pastepage.co. These tools collect anonymous usage data (pages visited, session duration, device type) to help us improve PastePage.

Advertising platforms

We may use advertising tools from platforms such as Google, Meta, TikTok, X, LinkedIn, and others to measure ad campaigns and reach prospective users. These tools may use cookies or pixels to track conversions from our ads.

We retain your account data and published content for as long as your account is active.

When you delete a page, it is removed from public access immediately. When you delete your account, your pages are removed from public access and your account data is deleted.

When a subscription ends (by cancellation or non-renewal), your data is archived for 90 days. During this period you may resubscribe to restore your account. After 90 days, archived data is permanently deleted and your username becomes available for others.

We may retain certain data (such as server logs) for up to 90 days after account deletion as required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).

We do not sell, rent, or share your personal information with third parties except in the following circumstances:

• Legal process. We may disclose your information if required to do so by law or in response to valid legal process, including subpoenas, court orders, or government requests.
• Protection of rights. We may disclose information when we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request.
• Service providers. We share data with the third-party services listed in Section 05 solely as necessary to operate the Service.

If we are legally compelled to disclose your information, we will attempt to notify you in advance unless prohibited by law or court order.

You have the right to:

• Access your data. You can view your account information and published content through the PastePage dashboard at any time.
• Update your data. You can change your password and update your published pages through the dashboard.
• Delete your data. You can delete individual pages or your entire account through your account settings.
• Export your data. Your published pages are standard HTML files that you can copy from the editor at any time.

If you have additional requests regarding your personal data, contact us at legal@pastepage.com.

PastePage is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at legal@pastepage.com and we will promptly delete the information.

PastePage is operated from the United States. If you access PastePage from outside the United States, your data may be transferred to, stored, and processed in the United States and other countries where Cloudflare operates infrastructure. International transfers are safeguarded by Standard Contractual Clauses (SCCs) and the data processing agreements we maintain with our service providers.

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA). We do not sell personal information as defined by the CCPA. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA.

You have the right to request access to, deletion of, and information about the categories of personal information we collect. To exercise these rights, contact us at legal@pastepage.com. We will not discriminate against you for exercising your privacy rights.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and similar laws.

Legal basis for processing. We process your personal data on the following bases: (a) performance of a contract (providing the Service to you); (b) legitimate interests (improving the Service, preventing fraud, security); and (c) your consent (for non-essential cookies such as analytics and advertising, which we will only set after obtaining your affirmative consent through a cookie consent mechanism where required by law).

Your rights. In addition to the rights listed in Section 08, you have the right to: request restriction of processing, object to processing based on legitimate interests, request data portability, and lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at legal@pastepage.com. We will respond within 30 days.

PastePage hosts public pages that are visited by people who may not have a PastePage account. If you visit a page hosted on PastePage (at username.pastepage.co or a custom domain), the following data may be processed:

• Your IP address and request metadata are processed by Cloudflare as part of serving the page. Cloudflare may retain standard web server logs in accordance with its own privacy policy.
• We collect an anonymous, aggregate page view count (incremented once per visit). We do not store your IP address, browser fingerprint, or any other visitor-identifying information.
• User-published pages may contain their own third-party scripts, analytics, or tracking code. We do not control or inject any tracking into user pages — any such scripts are placed by the page author.

In the event of a data breach that compromises your personal information, we will notify affected users as required by applicable law. Where legally required, we will provide notification within the timeframes mandated by applicable state, federal, or international law (for example, 72 hours under GDPR). Notification will be sent to the email address associated with your account and may also be posted on the Service.

Some browsers offer a "Do Not Track" (DNT) setting. There is currently no industry standard for how websites should respond to DNT signals. We do not currently alter our data collection practices in response to DNT settings. If an industry standard is established, we will review and update this policy accordingly.

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of PastePage after changes are posted constitutes acceptance of the updated policy.

For questions about this Privacy Policy or your personal data, contact us at legal@pastepage.com.

To report abuse or policy violations, contact us at abuse@pastepage.com.