Pastehere is designed to be privacy-first. To run the service we store: your room code, your end-to-end-encrypted messages and files (ciphertext only — we can't read them), basic routing metadata (timestamps, which device sent an item, and sizes), each device's public key and an access token so we can authorize it, and your IP address briefly to rate-limit abuse.
We use data solely to run pastehere: room codes connect your devices, and your encrypted messages and files are stored so every device in the room can load them. We do not analyze, profile, sell, or advertise against your data.
Your content is encrypted in your browser before it leaves your device, using AES-256-GCM. Our servers, our database (Supabase), and our hosting provider (Vercel) only ever see ciphertext — they cannot decrypt your content, even if compelled to. The remaining trust assumption — true of every web-based end-to-end-encrypted app — is the JavaScript we ship to your browser. A native desktop app and/or browser extension would remove that assumption and is a planned addition.
No advertisers and no data brokers. Three infrastructure providers help run the service: Supabase (Postgres, file storage, and realtime broadcast) holds your ciphertext along with room and device metadata; Vercel hosts the app; and Upstash Redis briefly stores requester IP addresses for rate-limiting, discarding them within about an hour. The message content Supabase holds is end-to-end encrypted, so they can't read it either.
Your encrypted messages and files stay until you remove them — delete an item, clear the room, or destroy the room, which permanently deletes everything in it. There's no timed auto-expiry, though you can enable auto-cleanup to drop the oldest items once a room reaches 80% of its storage. IP records used for rate-limiting are discarded within about an hour.
Pastehere doesn't use cookies at all. Your encryption keys and device identity live in your browser's local storage (IndexedDB) and never leave your device. There's no tracking or analytics of any kind.
Questions about privacy? Contact us at hello@pastehere.app
Last updated: May 2026