Back to Pasteboard
Legal

Privacy Policy.

Last updated: 22 May 2026 ·  Pasteboard is built in the EU and takes privacy seriously

The short version

Your data lives on EU servers. We never sell it. We share it only with the services needed to run Pasteboard — Supabase for storage and Stripe for payments. No third-party trackers, no ads, no surprises.

1. What we collect

We collect the minimum needed to run the service:

Account information

Your email address and display name, collected when you register — either directly or via an OAuth provider (e.g. Google).

Board content

The links, images, text, files, and notes you paste on your boards. This is your content — we store it so you can access it.

Payment information (Pro & Premium)

We use Stripe for billing. Stripe collects and processes your payment details — we only receive a billing status and an anonymised Stripe customer ID. We never see your card number.

Usage data

Basic logs (timestamps, IP addresses, browser type) stored for security and reliability purposes. We don't use third-party analytics scripts on your boards.

2. How we use your information

We use your data to:

  • Authenticate you and keep your account secure
  • Store and sync your boards across your devices
  • Process your subscription and send billing receipts
  • Send essential service emails (e.g. password resets, billing changes)
  • Diagnose bugs and improve reliability

We don't use your data to train AI models. We don't show ads. We don't build marketing profiles.

3. Third-party services

We work with two service providers to run Pasteboard. That's it.

SupabaseEU · Frankfurt

Database, file storage, and authentication. Your data is stored in Supabase's Frankfurt region under EU data-residency guarantees.

StripePCI compliant

Payment processing for Pro and Premium subscriptions. Stripe handles all card data under their own PCI-DSS Level 1 certification. We receive only your subscription status.

We don't use Google Analytics, Meta Pixel, Hotjar, or any other third-party tracking script.

4. EU hosting & GDPR

Pasteboard is built in Europe and all user data is stored on EU servers. We comply with the General Data Protection Regulation (GDPR).

Under GDPR, you have the right to:

  • Access a copy of the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your account and data
  • Restrict or object to how we process your data
  • Data portability — receive your data in a machine-readable format

To exercise any of these rights, email us at privacy@pasteboard.eu. We'll respond within 30 days.

5. Data retention

We keep your account and board data for as long as your account is active. If you delete your account, we permanently delete your personal data and board content within 30 days.

Stripe retains billing records as required for tax and compliance purposes. We can't delete those on your behalf, but they contain no sensitive card data.

6. Cookies

We use only functional cookies — for keeping you signed in and storing your preferences (like dark mode). No marketing cookies, no cross-site tracking.

7. Changes to this policy

If we make material changes, we'll notify you by email and update the date at the top of this page. We won't quietly change how your data is used without telling you.

Contact

A real person reads these emails.

Privacy questions: privacy@pasteboard.eu
General support: contact@pasteboard.eu