Privacy Policy

Last updated: March 19, 2026

PasteToMe ("we", "us", or "our") operates the website pastetome.com and the PasteToMe browser extension for Firefox and Chrome (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

Account Information

• Email address — required to create an account and used to deliver content you send to yourself.
• Phone number — required to enable SMS delivery. Used only to send messages you explicitly initiate.
• Password — stored as a one-way cryptographic hash. We never store or transmit your password in plain text.

Content You Send

• Text clips — text you highlight and send via the extension is stored in your personal pastes library.
• Links and URLs — URLs you shorten or save are stored in your pastes library.
• Images — images you save via the extension are downloaded and hosted on our servers and linked to your account.
• Source metadata — the URL and title of the page where content was captured are saved alongside each paste for your own reference. This data is collected only when you explicitly invoke a PasteToMe action and is never used for tracking or profiling.

Usage Counters

• We track the number of emails and SMS messages sent during the current calendar week solely to enforce weekly usage limits (200 emails / 50 SMS). These counters reset weekly and are visible in your account dashboard.

Browser Extension — Data Collected

• API token — stored in your browser's local extension storage to keep you signed in. It never leaves your device except as part of authenticated HTTPS requests to pastetome.com.
• Account preferences — theme and verification status are cached locally to avoid repeated API calls.
• Current tab URL and title — read only at the moment you explicitly trigger a PasteToMe right-click action (save, email, SMS, or shorten). This information is transmitted to pastetome.com solely to fulfil the action you requested. We do not read or record your browsing history.
• Selected text — read only when you right-click and choose a PasteToMe option. Not collected passively.
• No remote code — all extension code is bundled locally. The extension does not load or execute any remote scripts.

2. How We Use Your Information

We use your data only to provide and improve the specific features of the Service you use:

• To deliver content (email, SMS) that you explicitly send to yourself.
• To store and display your personal pastes library.
• To enforce usage limits and prevent abuse of the Service.
• To send transactional emails (email verification, content delivery). We do not send marketing emails.
• To notify administrators when an abuse report is submitted through the unsubscribe/report flow.

3. Limited Use — What We Will Never Do

We are committed to using your data only for the purpose of operating PasteToMe. Specifically, we will never:

• Sell, rent, or trade your personal data to any third party.
• Use your data for advertising, ad targeting, retargeting, or interest-based profiling of any kind.
• Use your browsing activity, clipped content, or tab metadata to build a profile of you for any purpose beyond delivering the action you requested.
• Share your data with third parties for their own independent use, except as described in Section 4 below.
• Allow any employee or contractor to read the content of your pastes or messages, except where you have given explicit consent, where it is necessary for security incident response, or where required by law.

4. Data Sharing

Your data is shared with third parties only as strictly necessary to provide the Service:

• Email delivery provider — your email address and the content you choose to send are transmitted to our transactional email provider solely to deliver messages you initiate. The provider acts as a data processor and is prohibited from using this data for their own purposes.
• SMS delivery provider — your phone number and message content are transmitted to our SMS provider solely to deliver messages you initiate. The provider acts as a data processor under the same restrictions.
• Business transfers — in the event of a merger, acquisition, or sale of assets, user data may be transferred to the successor entity, which will be bound by this Privacy Policy.
• Legal requirements — we may disclose information if required by law, court order, or to protect the rights, property, or safety of our users or the public.

5. Security

• In transit — all data is transmitted over HTTPS/TLS. The extension communicates exclusively with pastetome.com over encrypted connections.
• At rest — sensitive data is stored using strong encryption (AES or equivalent). Passwords are hashed using a strong one-way algorithm and are never stored or transmitted in plain text.
• Tokens — API tokens are time-limited and are immediately invalidated when you sign out.
• No system is completely secure. If you believe your account has been compromised, contact us immediately at admin@pastetome.com.

6. Extension Permissions Justification

The PasteToMe browser extension requests only the minimum permissions necessary to operate:

• contextMenus — adds right-click menu options so you can send or save selected text, links, and images.
• storage — stores your login token and preferences locally in your browser.
• notifications — shows a confirmation notification after an action completes (e.g. "Text sent to your email").
• activeTab — reads the URL and title of the current tab when you invoke a PasteToMe action, so the source context can be saved with your paste.
• host_permissions (pastetome.com) — allows the extension to communicate with the PasteToMe API to send and store your content.

No permissions are requested for future or speculative features. Permissions are not used for any purpose beyond what is described above.

7. Data Retention

• Your account data and pastes are retained for as long as your account is active.
• You may delete individual pastes at any time from your pastes library.
• To request full account deletion and erasure of all associated data, contact us at admin@pastetome.com. Requests are processed within 30 days.

8. Your Rights

You have the right to:

• Access the personal data we hold about you (much of it is visible in your account settings).
• Correct inaccurate information via your account settings.
• Request deletion of your account and all associated data.
• Withdraw consent for email delivery at any time using the unsubscribe link in any email we send.
• Opt out of SMS delivery by removing your phone number from your account settings.

9. Cookies

We use a single first-party session cookie (ptm_token) to keep you signed in. We do not use third-party cookies, advertising cookies, or any form of cross-site tracking.

10. Children's Privacy

PasteToMe is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. We will make reasonable efforts to notify users of material changes. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:
admin@pastetome.com