Privacy Policy
Pastetory ("we", "us", "the Service") is a clipboard synchronisation tool operated by Steve Hunt. This policy explains what data we collect, how we use it, and your rights.
1. Data We Collect
- Account information: When you sign in via a third-party provider (Google, GitHub, etc.), we receive your name, email address, and profile picture. We do not receive or store your password.
- Clipboard content: Text, images, and files you paste into the Service are stored encrypted on our servers. Vault-encrypted content is encrypted client-side — we cannot read it.
- Device information: Browser type, device name (user-chosen), and approximate location (country-level, derived from IP) for the connected devices panel.
- Usage data: We use Google Analytics to collect anonymous usage statistics (pages visited, session duration). No personally identifiable information is sent to Google Analytics.
2. How We Use Your Data
- To provide and maintain the clipboard sync service
- To authenticate your identity and secure your account
- To display your connected devices
- To improve the Service based on aggregate usage patterns
3. Advertising
Free-tier users may see advertisements served by Google AdSense. Google may use cookies to serve ads based on your prior visits to this or other websites. You can opt out of personalised advertising at Google Ads Settings. Paid-tier users do not see advertisements.
4. Cookies
- Authentication cookie: An HTTP-only cookie containing your session token, used to keep you signed in.
- Analytics cookies: Set by Google Analytics to distinguish users and sessions.
- Advertising cookies: Set by Google AdSense for ad personalisation (free-tier users only).
5. Data Storage & Security
Your data is stored in AWS (eu-west-1, Ireland). All data is encrypted in transit (TLS) and at rest (S3 server-side encryption). Vault-encrypted content has an additional layer of client-side encryption that we cannot decrypt.
6. Data Retention
- Your data is retained while your account is active.
- Burst Snippets are automatically deleted after 10 days.
- Accounts inactive for 12+ months may be deleted after 30 days' notice.
7. Third-Party Services
- AWS: Infrastructure and data storage
- Google Analytics: Anonymous usage statistics
- Google AdSense: Advertising (free tier)
- Stripe: Payment processing (paid tiers)
- Amazon Cognito: Authentication
8. Your Rights
You may request deletion of your account and all associated data by emailing pastetory@gmail.com. Under GDPR, you also have the right to access, rectify, or export your data.
9. Children
The Service is not intended for children under 16. We do not knowingly collect data from children.
10. Changes
We may update this policy from time to time. Changes will be posted on this page with an updated date.
11. Contact
For privacy questions, contact pastetory@gmail.com.