Privacy Policy
Last updated: June 7, 2026
Room identification
CopyPaster reads the public IP address supplied with a request and hashes it with a server secret to assign a room. The visible room key is derived from that hash. Devices using the same public route may receive the same room, so rooms should not be treated as private storage.
Content and retention
Text, chat messages, filenames, file metadata, and uploaded file content are processed to provide synchronization and downloads. Uploaded files are configured to expire after one hour. Users can clear text, chat, and files earlier through the available controls. Operational backups or infrastructure logs may persist for a limited period.
Advertising data
Google AdSense may use cookies, web beacons, IP addresses, and other identifiers to serve, measure, and protect advertising. Google and its partners may place or read cookies in your browser according to your consent choices and applicable law.
How Google uses data on partner sitesYour choices
Do not submit sensitive information. Clear room content after use, remove uploaded files when no longer needed, and use browser or Google ad settings to manage advertising cookies where available.
What we do not collect
Using a room requires no account, so we hold no name, email address, phone number, or password for you. We do not build a profile of what you share, and we do not sell or rent room content to anyone. The raw IP address is used to derive the room hash and to apply rate limits; the room key you see is the hash, not the address itself.
Private notes
Private notes are encrypted in your browser before anything is transmitted. The decryption key is placed in the fragment of the share link, which browsers never send to a server, so we store ciphertext we have no ability to read. This holds for our staff, our database backups, and anyone who obtained the stored record. A note is deleted once read or once it expires, whichever comes first, and it cannot be recovered afterwards.
Service providers
The site runs on Vercel and stores room data with Supabase, both of which process data on our behalf in order to host the service. Where analytics are enabled, Google Analytics receives standard usage measurements. These providers operate under their own privacy terms, and we share no more with them than delivering the service requires.
Children
CopyPaster is not directed at children under 13, and we do not knowingly collect information from them. Because the service requires no account, we have no practical way to identify a user's age — another reason to avoid sharing personal details in a room.
Contacting us
Questions about this policy, or a request to remove specific content, can be sent through the contact page. Please do not include the content itself, room keys, or note links in your message. This policy may be revised as the service changes; the date at the top of the page shows the most recent update.