Privacy Policy

1. Introduction

Just Paste App is built to be simple and privacy-friendly. We do not require user accounts, and we collect only the minimum data necessary to keep the service secure and functional.

This Privacy Policy describes what data we collect, why we collect it, how it is used, and your choices regarding that data. By using Just Paste App, you agree to the practices described here.

2. Information We Collect

2.1 Content You Submit

• Paste content: The text, title, and display name you provide when creating a paste.
• Uploaded images: Images embedded in your paste content, stored on Cloudflare R2.
• Custom slug: Optional custom URL alias you choose for your paste.
• Visibility setting: Whether your paste appears on the public timeline.

2.2 Automatically Collected Data

• IP address: Logged for abuse prevention, rate limiting, and security purposes.
• User-Agent: Browser and device type to help us maintain compatibility and detect anomalies.
• Timestamps: When content is created, edited, or accessed.
• View counts: How many times a paste has been viewed, stored anonymously.

2.3 Cookies & Local Storage

• Draft autosave: Your draft content is saved in browser localStorage only. It never leaves your device unless you choose to publish.
• Security cookies: Cloudflare Turnstile may set minimal cookies for CAPTCHA verification.
• We do not use tracking, analytics, or advertising cookies.

3. How We Use Your Information

• Service delivery: To store, render, and serve your paste content as intended.
• Abuse prevention: To detect spam, bot activity, and misuse of the platform.
• Rate limiting: To enforce fair usage and protect system stability.
• Content moderation: To review and act on reports of content that violates our Terms of Use.
• Legal compliance: To comply with applicable laws and respond to lawful requests from authorities.

4. Data Sharing & Disclosure

We do not sell, rent, or trade your data. Data may be shared only in these limited cases:

• Public content: Pastes published to the public timeline are visible to all users and may be indexed by search engines.
• Infrastructure providers: We use Cloudflare (CDN, DDoS protection, Turnstile) and cloud hosting providers. These are contractually bound to protect your data.
• Image storage: Uploaded images are stored on Cloudflare R2.
• Legal obligations: We may disclose data if required by law, court order, or to protect our legal rights.

5. Third-Party Links

Paste content may contain links to external websites. Just Paste App is not responsible for the privacy practices or content of those sites. We do not control, and are not liable for, any data you provide to third-party services you access through links in user content. We recommend reviewing the privacy policies of any third-party site before sharing personal information with them.

6. Data Retention

• Paste content: Kept until deleted by the creator via their edit key, or removed by us for policy or legal reasons.
• Access logs: IP addresses and request logs are retained for up to 90 days for security purposes, then purged.
• Deleted content: Permanently removed from our servers within 24 hours, including associated uploaded images.

7. Your Rights & Choices

• Edit & delete: Use your edit key at any time to modify or permanently delete your paste and its images.
• Visibility control: Choose at creation time whether your paste is listed publicly or kept unlisted.
• No account to manage: Since no registration is required, there is no account profile or personal data to request access to.
• Draft privacy: Unsaved drafts live only in your browser's localStorage and are never transmitted to our servers.

8. Data Security

• HTTPS/TLS: All data in transit is encrypted.
• Access control: Access to user data is restricted to authorized personnel only.
• DDoS & threat protection: Provided by Cloudflare.
• Backups: Regular backups are maintained to prevent data loss.

No transmission over the internet can be guaranteed 100% secure. While we apply reasonable safeguards, use of the service is at your own risk.

9. Do Not Track

Some browsers support a "Do Not Track" (DNT) signal. Because Just Paste App does not use behavioral tracking or advertising cookies, DNT signals have no practical effect on our data practices. We do not alter our data collection behavior based on DNT signals.