Privacy Policy

This Privacy Policy explains how DevPaste handles information when you use DevPaste at https://devpaste.app. It applies to the DevPaste website, developer tools, documentation, Learn Center, and related browser-based features.

DevPaste is designed as a privacy-first developer tools platform. The default product architecture favors local browser processing rather than server-side processing of pasted content.

Most DevPaste tools process content locally in your browser. During normal use, pasted content is not intentionally uploaded to DevPaste servers unless a future feature explicitly says otherwise before you use it.

Examples of locally processed content may include JSON, JWTs, Markdown, regular expressions, HTTP headers, API request templates, encoded text, passwords, UUIDs, and uploaded text files.

Tool input may remain in browser memory while a tool is open. Some features may use sessionStorage for temporary sessions or one-time handoffs between tools, and localStorage for preferences or user-controlled history features.

Temporary session data is intended to last only for the current browser session. Preferences, favorites, recent tools, editor settings, and similar interface choices may remain on your device until you clear them. If an explicit local-history feature is enabled, content may be stored locally on your device according to that feature.

DevPaste does not intentionally receive locally stored tool content.

DevPaste is hosted using infrastructure such as Cloudflare Pages. Cloudflare and similar infrastructure providers may process technical request information required to serve, secure, and operate the website.

• IP address
• browser type
• device information
• request time
• request URL
• security and performance metadata

DevPaste may use privacy-conscious analytics services, such as Google Analytics or Cloudflare Web Analytics, to understand aggregate website usage. The current application also includes local-only usage analytics that store tool ids and predefined action ids in your browser localStorage.

If external analytics are enabled, analytics may process pages viewed, approximate location, device and browser type, referrer, and session or engagement information. Users may be subject to the privacy terms of those analytics providers, including Google where Google Analytics is enabled.

Tool input must never be included in analytics events. JWTs, API keys, passwords, pasted documents, request bodies, regex text, generated outputs, API headers, cookies, and pasted URLs must not be sent as analytics parameters.

DevPaste may use browser storage for essential functionality, including preferences, favorites, recent tools, temporary sessions, one-time handoffs, and local-only usage analytics. localStorage and sessionStorage are browser storage mechanisms and are not cookies.

Analytics cookies or similar identifiers may be used if external analytics are enabled. DevPaste does not use advertising cookies unless the product changes and this policy is updated.

DevPaste does not intentionally collect the following tool content during normal client-side use:

• pasted JSON
• JWT content
• signing secrets
• private keys
• passwords
• API keys
• HTTP request bodies
• uploaded file contents
• source code entered into tools

Where EU or similar privacy laws apply, DevPaste may rely on legitimate interests to operate, secure, maintain, and improve the website. Where required by law, DevPaste may rely on consent for non-essential analytics or cookies.

This section is intended to be concise and practical. It does not guarantee that every legal basis or right applies in every circumstance.

DevPaste does not intentionally retain tool content on its servers during normal local-processing use. Local preferences and local-only usage data remain on your device until you clear them or your browser removes them.

Infrastructure and analytics providers may retain technical data according to their own policies, security needs, and configured retention periods.

DevPaste does not sell personal data. DevPaste may rely on service providers such as Cloudflare for hosting and security, and Google Analytics if analytics is enabled.

Information may also be disclosed when required by law, legal process, or to protect the rights, security, and operation of DevPaste and its users.

DevPaste uses HTTPS and a local-processing design to reduce unnecessary exposure of developer content. The project also uses security-focused implementation practices such as masking sensitive values in relevant tools and avoiding server-side processing of pasted content.

No website or browser-based system can guarantee complete security. You remain responsible for the environment where you paste or process sensitive material.

Infrastructure or analytics providers may process technical data outside Romania or the European Economic Area. Those providers may use their own appropriate transfer mechanisms where required by applicable law.

Depending on your location and the circumstances, you may have rights to access, correct, delete, restrict, object to processing, request portability of personal data, withdraw consent, or complain to a supervisory authority.

Because most tool content is processed locally and not intentionally received by DevPaste, DevPaste may not be able to access or delete content that exists only on your device. You can clear local browser storage through browser settings or DevPaste settings where available.

DevPaste is a developer tools platform and is not intended specifically for young children. DevPaste does not knowingly seek to collect children's personal data.

DevPaste may update this Privacy Policy from time to time. Updates will be published on this page and identified by the Last updated date.

Questions about this Privacy Policy can be sent to contact@devpaste.app.