Skip to content

Privacy Policy

Last updated: 11 August 2026

This page explains what data we collect when you use PasteMu, what it is used for, and what rights you have over it.

1. Data We Collect

a. Data you give us

  • Paste content — the text you paste, along with its title, tags, and settings.
  • Account data — username, email address, and password (stored as a hash, never as plain text).
  • Optional profile — display name and bio, if you fill them in.

b. Data collected automatically

  • IP address and user agent — recorded on login sessions and audit logs for security purposes.
  • View counters — an aggregate count of how many times a paste has been opened.
  • Server logs — recorded by the web server to detect abuse.

2. Cookies

Cookies we set ourselves are limited to what the Service needs to function:

  • your login session;
  • a temporary marker that you entered a paste's password;
  • a marker that you completed the human verification check;
  • your language preference.

We do not set advertising cookies and we do not sell data to advertisers.

3. Google Analytics

We use Google Analytics 4 to understand how the Service is used in aggregate — which pages are visited, from which countries, and on what kind of device. To do this, Google sets its own cookies and receives your IP address, which Google uses to derive an approximate location before discarding it.

This means a third party (Google) does process some data about your visit. We do not send Google the content of your pastes, your email address, or your username. You can opt out entirely by installing the Google Analytics Opt-out Browser Add-on, or by using your browser's tracking protection. Google's own handling of this data is covered by the Google Privacy Policy.

4. How We Use Data

  • to provide and display your pastes;
  • to manage accounts and login sessions;
  • to prevent abuse, spam, and illegal activity;
  • to understand aggregate usage so we can improve the Service.

We do not sell your personal data to anyone.

5. Paste Visibility

Public pastes are visible to anyone and may be indexed by search engines. Unlisted pastes are not shown in any listing, but anyone holding the link can open them. Private pastes can only be opened by their owner. System administrators can technically access data for moderation and maintenance purposes.

6. Data Retention

Pastes with an expiry time are permanently deleted once they pass it. Burn-after-read pastes become inaccessible after being opened. Account data is kept for as long as your account is active. Session and audit logs are kept only as long as needed for security.

7. Your Rights

  • access and update your profile data from the settings page;
  • delete your pastes at any time;
  • request deletion of your account and everything in it;
  • request a copy of the data we hold about you.

Submit requests through our contact page.

8. Security

All traffic is encrypted with HTTPS, passwords are hashed using the scrypt algorithm, and session tokens are stored as hashes. Even so, no system is completely impenetrable — don't store your most sensitive secrets here.

9. Children

This Service is not intended for children under 13. We do not knowingly collect data from them.

10. Policy Changes

This policy may be updated from time to time. The date of the most recent update is always shown at the top of this page.