Draft. These terms are written from our counsel's outline and are awaiting sign-off; we will publish the reviewed version before the public launch and record the version you accepted.
Privacy Policy
What we process, what we cannot process, and how long we keep it.
Version 2026-01-01
What we process
Account data (email, name, an OAuth profile if you use one), billing handled by Stripe, and secret metadata: kind, size, timings, view counts, coarse geography, hashed IP addresses and the channel used. Receipts include a verified recipient address when gating is on. Support conversations. Cookieless analytics on marketing pages only.
What we cannot process
The content of a secret encrypted in your browser, its filename, its type, your passphrase, or the key. These never reach us.
The one exception, stated plainly
curl mode encrypts on our server, because a terminal cannot run our code. The content passes through memory at creation and is never stored in plaintext or logged. Every response on that path is labelled, and so is the recipient's page.
How long we keep it
Ciphertext is destroyed when a secret is opened, expires or is revoked. Metadata is kept for thirty days after that and then purged. Aggregate events are kept for thirteen months. Backups roll over within twenty-four hours.
Sub-processors
Vercel, Railway, Cloudflare, Resend, Stripe, Sentry, our log provider and Plausible. The current list, with locations, is on the sub-processors page; we give notice before adding one.
Where it is
Personal accounts are served from the United States. A Team workspace picks its region when it is created, United States or European Union, and stays there: the regions are separate deployments with separate databases and separate object storage, and nothing moves between them.
Your rights
Access, correction, export and deletion, whoever you are and wherever you live. Under the GDPR our bases are contract, legitimate interest (abuse prevention) and consent (marketing). We do not sell or share personal information as those terms are used in California law.
Cookies
Session cookies for signing in, and nothing else. No tracking cookies, on any surface.
Contact
Write to legal@secretpaste.com.