Privacy Policy

Please read before using our platform.

1. Introduction

As the operator of fastpaste.xyz ("Site", "We", "Platform"), we take user privacy seriously. This policy explains what data is collected when you use the platform, how it is processed, and your rights. By using the platform, you agree to this policy.

2. Data Collected

When creating a paste, the following technical data is collected and stored:

  • IP Address: For security and legal compliance purposes.
  • User-Agent: Browser/device information.
  • Referer: The page that referred you to the site.
  • ASN / ISP: Autonomous System Number and internet service provider name.
  • Country Code: Country-level location based on IP address.
  • Digital Fingerprint: An identifier derived from browser characteristics.
  • Paste Content: The text or file content you upload.
  • Creation / Expiry Date: Timing information.

📖 Reading pastes is completely anonymous. No data is collected from viewers.

3. Purposes of Processing

  • Providing the service and ensuring technical operation.
  • Detection and prevention of abuse, spam, and attacks.
  • Rate limiting.
  • Compliance with legal obligations.
  • Platform security and improvement.

4. Retention

  • Paste contents are automatically deleted after the chosen period (1 hour → 1 month).
  • Metadata (IP, ASN, etc.) is anonymised 7 days after the paste is deleted and erased completely after 90 days.
  • Audit logs are kept for 90 days, then deleted automatically.
  • View logs are deleted after 180 days.

5. Cloudflare & Third Parties

  • Traffic passes through Cloudflare's network (CDN, DDoS protection, Turnstile captcha).
  • Cloudflare may process data under its own privacy policy: cloudflare.com/privacypolicy
  • ip-api.com is used for ASN/country detection (only your IP is transmitted; results are cached).
  • No third-party advertising or tracking services are used.

6. Cookies

  • privacy_consent — Privacy consent (1 year).
  • theme — Theme preference (1 year).
  • lang — Language preference (1 year).
  • PHPSESSID — Session management (technical, mandatory).
  • Cloudflare cookies — Security / performance.

7. Security

  • All connections are encrypted with HTTPS/TLS.
  • Passwords are hashed with Argon2ID.
  • Security headers are active (HSTS, CSP, X-Frame-Options, etc.).
  • Rate limiting and fingerprint-based protection are applied.
  • Cloudflare R2 object storage; content is stored encrypted.

8. Content Policy

  • Only text and code files are supported.
  • Malware, illegal material, or harmful content is strictly prohibited.
  • Administrators reserve the right to remove inappropriate content.

🇪🇺 GDPR — EU Users

If you reside in the European Union, your rights under GDPR include:

  • Right of access (Art. 15): You may request access to data held about you.
  • Right to rectification (Art. 16): You may request correction of inaccurate data.
  • Right to erasure / "Right to be forgotten" (Art. 17): You may request deletion of your data.
  • Right to restriction of processing (Art. 18): You may request that processing be suspended.
  • Right to data portability (Art. 20): You may request your data in a structured format.
  • Right to object (Art. 21): You may object to the processing of your data.
  • Right to lodge a complaint: You may complain to the Data Protection Authority in your country.

Legal basis for processing: Legitimate interest (security, abuse prevention) and/or user consent.

For requests: [email protected]

🇺🇸 CCPA — California Users

If you reside in California, your rights under the CCPA include:

  • Right to know: You may request information about the categories of personal data collected and their purposes.
  • Right to delete: You may request deletion of your personal data.
  • Right to opt out of sale: Your personal data is never sold to any third party.
  • Right to non-discrimination: You will not be treated differently for exercising your rights.

FastPaste does not sell personal data for commercial purposes. Requests: [email protected]

🇧🇷 LGPD — Brazil Users

If you reside in Brazil, your rights under the LGPD (Lei Geral de Proteção de Dados) include:

  • You may request access to and confirmation of your personal data.
  • You may request correction of incomplete, inaccurate, or outdated data.
  • You may request deletion of unnecessary or excessively processed data.
  • You may request information about with which organizations your data is shared.
  • You may withdraw consent for data processing.

Requests: [email protected]

🌍 Other Jurisdictions

  • Germany (DSGVO/BDSG): GDPR applies. Contact us for requests.
  • France (RGPD): GDPR applies. You have the right to complain to the CNIL.
  • Spain (LOPDGDD): GDPR applies. You may file a complaint with the AEPD.
  • Russia (Federal Law No. 152-FZ): Contact us for requests regarding processing of personal data.
  • Arab countries: Contact us for your rights under local data protection laws.
  • Turkey (KVKK): Contact us for your rights under Law No. 6698 on the Protection of Personal Data.

15. Changes

This policy may be updated without prior notice. Changes take effect from the moment they are published. Continued use of the platform constitutes acceptance of the updated policy.

16. Contact

For all requests regarding the privacy policy or your personal data: [email protected]

Last updated: 22.06.2026