Because Pasteport requires no account registration, we do not collect names, email addresses, phone numbers, or billing details. The data processed consists solely of:

• Uploaded Content: Text snippets, code, images, documents, or files you choose to upload.
• Clip Metadata: File names, file sizes, MIME types, creation timestamps, expiration timestamps, and randomly generated 6-digit or 8-digit share codes.
• Technical Server Logs: Standard HTTP request data (IP address, browser user agent, referral headers, and request timestamps) processed temporarily by edge routers and CDN infrastructure for network routing, security, rate limiting, and DDoS mitigation.

When a clip reaches its 24-hour expiration threshold, automated background cleanup jobs purge the Firestore document metadata along with all associated files and oversized text objects from Cloudflare R2 object storage.

To provide fast, reliable, and scalable service, Pasteport utilizes the following industry-standard cloud providers:

Each provider adheres to international privacy standards (including GDPR Standard Contractual Clauses and SOC 2 certifications).

Pasteport does not use tracking cookies, advertising beacons, or third-party behavioral profiling.

• Local Storage (`localStorage`): Used exclusively on your device for user convenience—for instance, remembering your most recent generated share code for easy access, which automatically expires after 24 hours.
• Service Worker & Cache: When installed as a Progressive Web App (PWA), static application assets (CSS, scripts, icons) are cached locally on your device to support faster loading and offline UI availability.

Pasteport provides open-source native desktop clients (Electron) and command-line interfaces (pasteport-zisphere). Both tools uphold our strict zero-tracking principles:

• Zero Keystroke Logging or Background Monitoring: The desktop app registers the operating system shortcut (Ctrl+Shift+P or Cmd+Shift+P) strictly to display the HUD window. It does not monitor typing, capture background keystrokes, or log non-Pasteport window titles.
• Explicit Clipboard Access: The desktop client and CLI only read your clipboard when explicitly invoked (e.g. pressing the hotkey or running a command). Clipboard contents are never streamed or persisted in background daemon logs.
• No Analytics or Telemetry: Neither the desktop daemon nor the CLI bundles telemetry, crash analytics trackers, or usage metrics. All requests connect directly over encrypted HTTPS to Pasteport servers.

We implement robust sandboxing to prevent cross-site execution and protect users:

• No Code Execution: Uploaded scripts, code files, HTML, and SVG files are rendered strictly as escaped plaintext inside read-only text containers or sandboxed elements.
• Origin Isolation: Cloudflare R2 objects are hosted on distinct external origins with strict Same-Origin boundaries preventing uploaded files from interacting with your session.
• Prohibited File Types: Native executable binaries (`.exe`, `.msi`, `.dll`, `.scr`, `.bat`, etc.) are prohibited from upload.

Depending on your jurisdiction, you have legal rights regarding personal data:

• Right to Access & Deletion: Because all clipboard content is purged automatically within 24 hours and we hold no user accounts, most content deletion is self-executing.
• Immediate Removal: If you uploaded content by mistake or suspect unauthorized sharing, you may contact our takedown channel for immediate manual removal.
• No Sale of Personal Data: Pasteport does not sell, rent, or monetize personal data or uploaded content.

For privacy questions, data concerns, or urgent takedown inquiries, please contact: