Privacy Policy
Last updated: April 2, 2026
PasteBase ("we", "us", "our") is operated by Nullbase ApS, Rougsøvej 1, 8940 Randers SV, Denmark (CVR: DK37283681). This policy explains what data we collect, why we collect it, and how we protect it.
1. Data we collect
Account information
When you register, we collect your username, email address, and a hashed password. You may optionally add a display name and bio.
Paste content
We store the pastes you create — including title, category, content, editor type, and code language — so you can access and copy them at any time.
Usage data
We log when a paste is copied (who and when) to provide copy-count statistics within the app. We do not track browsing behavior, page views, or use any analytics platform.
2. Cookies
We use a minimal set of cookies — no advertising or tracking cookies.
| Cookie | Purpose | Duration |
|---|---|---|
sessionid |
Keeps you logged in | Browser session |
csrftoken |
Protects against cross-site request forgery | Browser session |
pb_consent |
Stores your cookie preference | 1 year |
pb_theme |
Remembers your dark/light theme choice | 1 year (only with your consent) |
pb_sort2 |
Remembers your paste sorting preference | 30 days (only with your consent) |
pb_filter_cats |
Remembers your selected category filters | 30 days (only with your consent) |
pb_filter_search |
Remembers your last search query | 30 days (only with your consent) |
sp_sort2 |
Remembers sorting on shared pastes page | 30 days (only with your consent) |
sp_teams |
Remembers team filter on shared pastes page | 30 days (only with your consent) |
sp_cats |
Remembers category filter on shared pastes page | 30 days (only with your consent) |
sp_search |
Remembers search query on shared pastes page | 30 days (only with your consent) |
How to manage or remove cookies
You can manage your cookie preferences at any time from your Profile Settings within the app. Choosing "Necessary only" will remove all preference cookies (theme, sorting, filters, and search).
You can also delete cookies directly through your browser:
- Chrome — Settings → Privacy and security → Cookies and other site data → See all cookies and site data
- Firefox — Settings → Privacy & Security → Cookies and Site Data → Manage Data
- Safari — Preferences → Privacy → Manage Website Data
- Edge — Settings → Cookies and site permissions → Manage and delete cookies and site data
Note that removing essential cookies (sessionid, csrftoken) will log you out and may affect functionality.
3. Third-party services
We use a small number of external services to operate PasteBase:
- Resend — sends transactional emails (account verification, invitations, password reset). Resend receives your email address for delivery purposes only.
- Google Fonts — loads the Plus Jakarta Sans typeface. Google may receive your IP address and user agent when fonts are loaded.
- jsDelivr CDN — delivers the PicoCSS framework. jsDelivr may receive your IP address and user agent.
- Hetzner Online GmbH — hosts our servers and database in Germany. All your data is stored on Hetzner infrastructure within the EU.
We do not use any analytics, advertising, or tracking services.
4. How we use your data
- To provide and maintain the PasteBase service
- To authenticate you and protect your account
- To send essential emails (verification, invitations, password reset)
- To display copy statistics within your dashboard
We never sell, rent, or share your personal data with third parties for marketing purposes.
5. Data storage and security
Your data is stored in a PostgreSQL database. Passwords are hashed using Django's default PBKDF2 algorithm. All connections are encrypted with TLS. We retain your data for as long as your account is active.
6. Your rights
You have the right to:
- Access your personal data
- Correct inaccurate data via your profile settings
- Delete your account and all associated data
- Export your paste content
- Withdraw consent for preference cookies at any time
To exercise any of these rights, contact us at the address below.
7. Data retention
We keep your data for as long as your account exists. If you delete your account, all personal data and paste content are permanently removed. Invitation records expire and are cleaned up after 3 days.
8. Children's privacy
Under GDPR and Danish law, the age of digital consent is 16 years. PasteBase is intended for users aged 16 and over. We do not knowingly collect personal data from children under 16 without verifiable parental consent. If you believe a child under 16 has registered without parental consent, contact us at support@pastebase.eu and we will promptly delete their account and data.
9. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email or a notice within the app. The "last updated" date at the top reflects the most recent revision.
10. Contact
If you have questions about this privacy policy or your data, contact us at:
Email: support@pastebase.eu