Privacy Policy & Cryptographic Data Retention

IPasteIt (https://ipasteit.bond) is built on the engineering principle that personal privacy should not require blind trust in central infrastructure. This Privacy Policy outlines how text payloads, operational logs, and account credentials are treated across our network. For password-protected pastes, cryptographic key derivation occurs entirely client-side in browser memory via AES-GCM-256. Plaintext passphrases and decryption keys never traverse our edge routers or persist on disk.

• Anonymous Pastes: Content payloads, syntax tags, expiration timestamps, and one-way cryptographic SHA-256 hashes of private management tokens. • Registered Accounts: Valid email address, securely salted password hashes (Argon2id), and authentication session tokens. • Ephemeral Diagnostic Logs: Truncated IP addresses (masked at the edge) and user-agent headers retained in rolling memory buffers for a maximum of 24 hours strictly to combat automated DDoS attacks and API brute-force abuse.

When a paste reaches its configured expiration lifetime or single-use Burn-After-Reading threshold, the payload bytes are hard-purged from primary relational storage. We do not retain shadow backups, historical snapshots, or ghost revisions of expired payloads. Database cleanup cron routines execute at continuous sub-minute intervals.

• Advertising Support: To sustain infrastructure, high-throughput edge bandwidth, and complimentary access for developers, IPasteIt may display non-intrusive advertisements served by Google AdSense and qualified third-party vendors. • Third-Party Vendor Cookies: Google, as a third-party vendor, uses cookies (including the DoubleClick DART cookie) to serve advertisements on ipasteit.bond. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this platform and/or other sites across the Internet. • User Opt-Out Controls: Users may opt out of personalized advertising by visiting Google Ads Settings at https://adssettings.google.com. Alternatively, you may opt out of a third-party vendor's use of cookies for personalized advertising by visiting the Network Advertising Initiative or AboutAds at https://www.aboutads.info. • Zero Private Data Brokerage: We strictly do not sell, rent, monetize, or broker private paste contents, passphrases, or management tokens to advertisers or data brokers.

Under the European Union General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you retain the right to: • Request complete disclosure of any personal information associated with your verified account. • Request permanent erasure ('Right to be Forgotten') of all account metadata and authored pastes. • Anonymous creators may delete or mutate their records immediately at any time by supplying their private management token.

All external and internal network communication enforces Transport Layer Security (TLS 1.3) with mandatory HTTP Strict Transport Security (HSTS). Privacy Inquiries & Data Protection Contact: support@ipasteit.bond