Privacy Policy

Effective: January 1, 2026 — Last updated: April 14, 2026

Thank you for trusting Degradow Paste with your content. We take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, and what choices you have. The short version: we collect the minimum information necessary to operate the Service, we do not sell it, and we do not use tracking or advertising cookies.

1. What Information We Collect and Why

Information from all visitors. When anyone visits our Website, we collect basic information that most websites collect. This includes your browser type, language preference, referring site, IP address, and the date and time of each request. We collect this information from standard web server logs to monitor and protect the security of the Website.

Paste content. When you create a paste, we store the text/code you submit on our servers. This content is stored until it expires (if you set an expiration) or until you manually delete it using your edit link. Public pastes are visible to anyone with the URL.

IP address (hashed). When you create a paste or submit a report, we store a one-way SHA-256 cryptographic hash of your IP address alongside the paste. This hash cannot be reversed to recover your original IP address. We use it solely for abuse prevention, rate limiting, and responding to law enforcement requests when legally required.

Session cookie. We set a single session cookie (DGPASTE) for CSRF (Cross-Site Request Forgery) protection. This cookie contains no personal information and expires when you close your browser.

2. What Information We Do NOT Collect

We want to be explicit about what we do not collect:

• We do not require registration, email addresses, usernames, or passwords
• We do not store your raw (unhashed) IP address in paste data
• We do not use tracking cookies, analytics cookies, or advertising cookies
• We do not use third-party analytics services (Google Analytics, etc.)
• We do not display advertisements or share data with ad networks
• We do not intentionally collect sensitive personal information such as social security numbers, financial account numbers, health information, or biometric data
• We do not intentionally scan or analyze the content of your pastes, except to enforce our Terms of Service when abuse is reported

3. How We Use Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the paste-sharing Service
• To enforce our Terms of Service and Acceptable Use Policy
• To respond to abuse reports and legal requests
• To implement rate limiting and prevent spam or automated abuse
• To monitor and protect the security of the Website and infrastructure

4. How We Share Information

We do not sell, rent, trade, or share your personal information with third parties for their commercial purposes. We may disclose information only in the following limited circumstances:

• Public pastes. Content you post as a public paste is accessible to anyone with the URL. This is the intended functionality of the Service.
• Legal requirements. We may disclose information when required by law, subpoena, court order, or government request.
• Protection of rights. We may disclose information to protect the rights, property, or safety of the Service, its users, or the public.
• Enforcement. We may disclose information to enforce our Terms of Service.

5. How We Respond to Compelled Disclosure

We may be legally required to disclose information in response to valid legal process (e.g., a subpoena, court order, or search warrant). When permitted by law, we will make reasonable efforts to notify affected users before disclosing their information. Note that because we store IP addresses only in hashed form, the usefulness of such information to third parties may be limited. Server access logs maintained by our hosting provider may contain raw IP addresses subject to the hosting provider's own retention policies.

6. Data Retention

• Pastes with expiration: Automatically deleted after the expiration period you selected
• Pastes without expiration: Stored indefinitely until manually deleted by the author using their edit link, or removed by us for Terms violations
• Abuse reports: Retained for a reasonable period to handle disputes and maintain an audit trail
• Rate-limiting data: Temporary; automatically expires within hours
• Server logs: Subject to our hosting provider's retention policy (typically 30–90 days)

7. Cookies & Tracking

We use a single session cookie (DGPASTE) strictly for security purposes (CSRF token). This cookie:

• Contains no personal information or user identifiers
• Expires when you close your browser
• Is marked as HttpOnly (inaccessible to JavaScript) and SameSite=Lax
• Is marked as Secure when accessed over HTTPS

We do not use any other cookies. We do not use tracking pixels, beacons, fingerprinting, or any other tracking technologies.

8. How We Secure Your Information

We take reasonable measures to protect the information we store:

• IP addresses are stored as irreversible SHA-256 hashes, not in plaintext
• CSRF tokens protect against cross-site request forgery attacks
• Content Security Policy (CSP) headers protect against cross-site scripting (XSS)
• File-level access controls prevent direct access to stored paste data
• Rate limiting prevents brute-force and automated abuse
• HTTPS encryption is available and recommended for all connections

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights & Choices

• Delete your pastes: Use the edit link provided at creation to delete your paste at any time
• Request data removal: Contact us at abuse@degabin.com.es to request removal of specific content or data
• No account required: The Service does not require registration, so there is no account to delete
• Opt out: You may stop using the Service at any time

If you are located in the European Economic Area (EEA), you may have additional rights under GDPR, including the right to access, rectify, or erase personal data. Contact us to exercise these rights.

10. Children's Privacy

The Service is not intended for children under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will take steps to delete that information promptly.

11. International Users

The Service is hosted and operated in the jurisdiction of its operator. If you access the Service from outside this jurisdiction, you do so at your own risk and are responsible for compliance with local laws. By using the Service, you consent to the transfer and processing of information as described in this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated "Last updated" date. Material changes may also be communicated through a notice on the Website. Continued use of the Service after changes constitutes your acceptance of the updated policy.

13. Contact

For privacy-related inquiries, data removal requests, or questions about this policy, contact us at abuse@degabin.com.es.