Privacy Policy — CodeThis

1. Introduction

This Privacy Policy describes how CodeThis ("we", "us", "our") collects, uses, and protects your personal information when you use our paste and code sharing service at codethis.dev.

2. Information We Collect

Information You Provide

Account information: Name, email address, and password when you register
Paste content: Code, text, and markdown you create and store on the Service
Payment information: Billing details processed through our payment provider (Stripe)

Information Collected Automatically

Usage data: Feature usage, paste creation frequency, and interaction patterns
Session data: Authentication cookies required for login functionality
Server logs: IP addresses, request timestamps, and error logs for operational purposes

3. How We Use Your Information

We use your information to:

Provide and operate the Service
Manage your account and billing
Send transactional emails (account verification, billing notifications)
Monitor and improve Service performance and security
Comply with legal obligations

We do not use your paste content to train AI models. We do not sell your personal information.

We share your data only with the following service providers, solely for operating the Service:

Provider	Purpose	Data Shared
Stripe	Payment processing	Billing and payment information
Resend	Transactional email	Email addresses, email content
Infrastructure providers	Hosting	All Service data (encrypted at rest)

We may also disclose information if required by law, legal process, or to protect the rights and safety of CodeThis or others.

5. Data Retention

Paste content: Expires based on the duration you selected at creation. Expired pastes are soft-deleted and eventually purged.
Active accounts: Account data is retained for the duration of your account
Deleted accounts: Data is deleted within 30 days of account deletion
Server logs: Retained for up to 90 days for operational purposes

6. Your Rights

You have the right to:

Access: Request a copy of your personal data
Correction: Update inaccurate personal information
Deletion: Request deletion of your account and associated data
Export: Download your pastes from your dashboard

To exercise these rights, contact us at [email protected].

7. Security

We implement industry-standard security measures including:

Encryption in transit (TLS/HTTPS)
Passwords hashed with bcrypt
API keys hashed with SHA-256 (only the hash is stored — the key itself is never retrievable)
Optional password protection for individual pastes
Session-based authentication

8. Cookies

We use essential session cookies for authentication and login functionality only. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at [email protected].

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy-related questions or requests, contact us at [email protected].