Privacy policy
The short version: 123Paste has no accounts, no ads and no tracking cookies. What you paste is stored for 30 minutes and then deleted automatically. Anyone who knows your three words can open your paste during that time, so please don't paste passwords or other secrets.
Who we are
123Paste (123paste.com) is run by SAYITFRAMED LTD, a company registered in England and Wales (company number 16461282). We are the "controller" of the personal data described here. Contact us at privacy@123paste.com.
What we collect and why
1. What you paste
When you create a paste, its text and a few details about it (whether it's a link or plain text, and when it was created) are stored in our database, hosted in the EU (Ireland). It is stored only so the person with the three-word address can retrieve it. Each paste is deleted automatically 30 minutes after it was created, and can be opened any number of times until then.
We don't read, analyse or sell paste content, and we never write it into our logs. We would only look at a paste if we had to investigate an abuse report or meet a legal obligation, and only while it still exists.
We can't tell who created a paste, and a paste usually contains no personal data. If yours does, for example a name or a phone number, it is deleted with the rest of the paste.
2. Your IP address
Your browser's IP address is used to deliver the site to you and to protect it from abuse. To limit how often one person can create pastes or guess addresses, our app turns your IP address into a scrambled one-way code. For IPv6 addresses it uses only the network part. The code is stored in short-lived counters that are deleted after 10 minutes. We don't store your raw IP address in our database.
3. Technical logs
Our hosting provider keeps short-term technical logs for a few days. They record events such as "paste created", the type and length of a paste, failed lookups, and the web addresses requested, which can include a paste's three words. They never contain what you pasted. We use them to keep the service working and to spot abuse.
4. Cookies
123Paste doesn't set any cookies, and we use no advertising or tracking cookies. Our security provider, Cloudflare, may set a strictly necessary cookie (such as __cf_bm or cf_clearance) to tell people from bots. These cookies are needed to keep the site secure, so they don't require consent.
5. Emails you send us
If you email us, we use your email address and message to reply and to deal with your request, such as an abuse report. We keep this correspondence only as long as needed to handle it, and for up to 2 years if it relates to abuse or a legal matter.
Our legal basis
We rely on legitimate interests under the UK GDPR. That means providing the service you ask for, keeping it secure and preventing misuse, in ways you'd reasonably expect and with minimal data. Where we must keep or share information to comply with the law, we rely on legal obligation.
Who we share data with
We don't sell or rent personal data. We use these service providers, who act on our instructions:
| Provider | What they do |
|---|---|
| Cloudflare, Inc. | Hosting, content delivery, security, bot protection and technical logs |
| Upstash, Inc. | The database that holds pastes for 30 minutes, and the rate-limit counters |
| Google (Gmail) | Receiving the emails you send us |
We may also disclose information if the law requires it, for example to the police with a valid legal request, or to protect people from serious harm.
International transfers
These providers are US companies, and Cloudflare runs a global network, so some data may be processed outside the UK. Where that happens we rely on the legal safeguards those providers offer, such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses with the UK Addendum.
How long we keep things
| Data | Kept for |
|---|---|
| Paste content | 30 minutes, then deleted automatically |
| Rate-limit counters (scrambled IP code) | 10 minutes |
| Technical logs | A few days |
| Emails to us | As long as needed to handle them; up to 2 years for abuse or legal matters |
Your rights
Under UK data protection law you have the right to access, correct or delete your personal data, to object to or restrict how we use it, and to data portability. Email privacy@123paste.com and we'll respond within one month. Because there are no accounts and pastes expire within 30 minutes, we usually hold nothing that identifies you.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Children
123Paste is not intended for children under 13.
Changes to this policy
If we change how we handle data, we'll update this page and its date. Significant changes will be made clear on the site.