Privacy policy

pastedeck is run by an individual developer, Tang Yang, who is the data controller for the personal data described on this page. He operates from Hong Kong and the service is offered under the laws of the Hong Kong Special Administrative Region.

For anything to do with this policy or your personal data, write to privacy@pastedeck.app. General product questions and refund requests go to support@pastedeck.app.

No Data Protection Officer has been appointed. The service is small enough that privacy requests are handled directly by the controller at the address above.

What you give us. There are three ways to give us a document. You can upload a file, paste text, or provide a link; in the first two cases your browser reads the text before anything is sent, so the file itself never leaves your device and what we receive is the text it contained. If you provide a link, our own server requests that page from the site hosting it and extracts its text. In every case the text is what we send to a model API in order to produce your deck. On the paid path we store that text together with the order, so that generation can continue after the payment is confirmed; if the text came from a link, we store the address as well. We do not ask you for anything else in order to generate.

What we collect automatically. When your browser talks to the service we set a single anonymous session cookie, __anon, which stays valid for one year. It carries a random value; the database stores only the SHA-256 hash of that value, never the value itself. Alongside it we keep a record of each generation — when it ran and how many tokens it consumed — and basic request information such as which endpoint was called, when, and whether it succeeded.

What we do not collect. We do not ask for an email address or any registration, because a deck can be generated anonymously. We never see or store card numbers or other payment credentials. We do not log IP addresses at the application layer; rate limiting is enforced at the Cloudflare edge, before a request reaches our code.

Purpose	Legal basis
Providing and maintaining the service — receiving your document, generating the deck, serving the result	Performance of a contract
Billing and payment processing, including confirming a payment before generation continues	Performance of a contract
Security and abuse prevention, such as rate limiting and detecting automated misuse	Legitimate interests
Product improvement and aggregate analysis of how the service is used	Legitimate interests
Meeting legal, tax and accounting obligations	Legal obligation

We do not use your document to build advertising profiles, and we do not make automated decisions about you that produce legal effects.

We do not sell your personal information. That statement uses the meaning of "sale" set out in the California Consumer Privacy Act and the California Privacy Rights Act, and it also describes our ordinary practice: we have no advertising or data-brokering partners.

We share personal data only in three situations: with the service providers listed in section 5, who are bound by confidentiality and data-processing terms; where the law, a court order or a regulator requires it; and with your explicit consent for something specific. Card data is handled exclusively by a PCI-DSS compliant payment processor and never passes through our servers.

The text of the document you give us is sent to a third-party model service in order to generate your deck. This is the core of how pastedeck works, and it means your document leaves our infrastructure. We name each provider so you know exactly who is involved:

• DeepSeek — an external model API. The text we read for you is sent to it for generation. On the paid path the same text is also written to our own order record, which we keep in Cloudflare R2 as described in section 6, so DeepSeek is not the only party that holds it.
• Waffo — acts as the Merchant of Record for payments and refunds. Waffo holds the email address you enter at checkout. We do not receive or store your card details.
• Cloudflare — runs the Worker that serves this site, stores generated HTML artifacts in R2, and provides cookie-less analytics.
• Supabase — hosts the relational database that holds generation records and session hashes.

Each of these providers processes data on our instructions and under a data-processing agreement.

One more consequence worth stating plainly: when you provide a link, the page is requested by our infrastructure rather than by your browser, so the site you link to will see our request and not yours.

Generated HTML artifacts live in Cloudflare R2. On the paid path our own order records live there too: an order record contains the text we read for you, and the address as well if that text came from a link, because the order has to exist before the payment is confirmed and generation can continue afterwards. That makes Cloudflare R2 the only place on our side where your document text is stored. Relational data also lives in Supabase: generation records, hashed session values, and non-content order metadata such as the internal order id, tier, amount, payment status and generated deck path. We do not copy the document text or the checkout email into that order metadata. Waffo processes payments and refunds as the Merchant of Record and holds the payment credentials and the email address you enter at checkout; your document text is never sent to Waffo. These stores are run by the providers listed above, not by us directly.

Public examples and search indexing. A deck you share by link is accessible to anyone who has that link. We may also select a generated deck for a public example, marketing page or gallery, and may allow search engines such as Google to crawl and index that page. When that happens, the deck title and any text that appears in its slides may be publicly visible. If you do not want a deck used this way, email privacy@pastedeck.app and we will remove it from public display and request removal from search results; third-party caches may take time to update.

pastedeck sets exactly one first-party cookie: __anon, a strictly necessary cookie that ties the generation records of the same browser together so that a deck you just created is still reachable from the same browser. It contains no personal information and is valid for one year. Our analytics are cookie-less. Because there is no analytics or advertising cookie, the site shows no consent banner; there is nothing non-essential to consent to.

Traffic between your browser and the service is encrypted with TLS over HTTPS. Access to the database and to stored artifacts is limited to what each component needs, using least-privilege credentials. Our providers are established cloud infrastructure companies with their own security programmes. If a security incident occurs that is likely to affect your rights, we will notify you and the relevant authorities as the applicable law requires.

Anonymous generation results and our own order records are kept for up to 30 days. That is our stated retention policy. We deliberately do not promise a shorter window, because a shorter automatic deletion period is not yet in place. If you want your material removed sooner, ask us at privacy@pastedeck.app and we will delete it. The payment credentials and the checkout email are held by Waffo under its own retention policy and the tax and accounting rules that apply to it. Session hashes are kept for as long as they are useful for linking a browser to its own records; in practice that is the one-year life of the cookie. As with the anonymous results above, no automatic deletion is in place for them today.

Depending on where you live, you may have the right to access the personal data we hold about you, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@pastedeck.app. We respond within 30 calendar days. We may need to ask for details that let us locate the records concerned, since anonymous use means we do not hold an email address that identifies you.

Our servers and those of our providers may be located outside Hong Kong, including in the United States and the European Union. Where personal data is transferred out of the European Economic Area or the United Kingdom, the transfer is covered by a data-processing agreement that incorporates the European Commission's Standard Contractual Clauses.

pastedeck is not directed at children. We do not knowingly collect personal data from anyone under 13, and users in European Union member states must meet the higher age threshold those states set, which can be up to 16. If you believe a child has provided us with personal data, contact privacy@pastedeck.app and we will remove it.

If you are a California resident, the CCPA and CPRA give you the rights described in section 10, including the right to know what categories of personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information and we do not share it for cross-context behavioural advertising. The categories we collect are the ones listed in section 2: the text we read for you, the address you provided if you used the link option, a hashed anonymous session identifier, generation records, and basic request information. You can exercise your rights at privacy@pastedeck.app.

When this policy changes, we update the date and version shown at the top of the page, and for material changes we give notice before they take effect. Questions about privacy go to privacy@pastedeck.app; anything else, including refunds, goes to support@pastedeck.app.