Back to App
Legal

Privacy Policy

Last updated: March 2026

Short version: We encrypt your text in your browser before it ever reaches our server. We cannot read your content. We store nothing permanently. No account, no tracking, no selling of data.

1. Who We Are

PingPaste ("we", "us", "our") operates the website at pingpaste.com. We provide a free, encrypted text and link transfer service. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. What Data We Collect

Your content: When you use PingPaste to send text or links, your content is encrypted with AES-256-GCM directly in your browser before being transmitted to our server. We only ever store the encrypted ciphertext — we have no technical ability to read your content.

Server logs: Our server automatically records standard access logs including IP addresses, timestamps, and request types. These logs are used for security monitoring and are not shared with third parties.

Analytics: We use Google Analytics to understand how visitors use our site. Google Analytics collects anonymised usage data such as pages visited and general location. No personally identifiable information is collected through analytics.

No advertising cookies: We do not use cookies for tracking or advertising purposes.

3. How We Use Your Data

  • Encrypted payloads are stored temporarily in memory (maximum 10 minutes) and deleted permanently on first retrieval or expiry.
  • Server logs are retained for up to 30 days for security and abuse prevention.
  • Analytics data is used solely to improve the service.
  • We do not sell, rent, or share your data with any third parties.

4. Data Retention

Encrypted text payloads are automatically deleted after 10 minutes or immediately upon retrieval. Once deleted, data cannot be recovered.

5. Security

All data is protected by HTTPS/TLS. Text content is additionally encrypted client-side using AES-256-GCM via the browser's native Web Crypto API. Even in the event of a server breach, your plaintext content remains inaccessible.

6. Third-Party Services

  • Google Fonts — for typography.
  • Google Analytics — for anonymised usage statistics. Opt out via Google's opt-out tool.

In the future, we may display advertisements via Google AdSense. This policy will be updated accordingly.

7. Children's Privacy

PingPaste is not directed at children under the age of 13. We do not knowingly collect personal information from children.

8. Your Rights

Because we do not collect personally identifiable information and all content is auto-deleted, there is typically no data to access or delete. For concerns about server log data, contact us and we will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

10. Contact

Questions? Contact us at: privacy@pingpaste.com