Privacy Policy

This page explains what NodePaste stores about you and why. We keep it to the minimum the site needs. It applies to visitors and account holders, including under the GDPR and the Turkish KVKK.

What we collect

• Account data: email address, display name, a hashed password (we never store the plain password), and optional profile fields you fill in (bio, profile picture, social links and a Discord username). Those optional fields are shown publicly on your profile only if you fill them in. If you sign in with Google or Discord we receive your verified email address, name and avatar from that provider, and nothing else. We never post to your account.
• Content you publish: titles, descriptions, tags, Blueprint and Material clipboard text, comments and image links. Public shares are visible to everyone. Unlisted shares are visible to anyone who has the link. Shares you mark Private are visible only to you. When you replace the graph of a share, the earlier version is kept (a limited number, only visible to you) so you can go back.
• Collections and usage counts: the collections you create and which shares are in them, your plan (Free or Pro), and per share counters for views and copies. The counters are not linked to visitors.
• Reports: if you report a post or comment, we store your report and which account sent it, so moderators can review it. Reports are deleted once a moderator has handled them.
• View counts: a simple counter per post. It is not linked to you. Your browser remembers in session storage that a post was already counted, so refreshes do not add views.

Cookies

We use one cookie, a login session cookie (bv_session), which lasts up to 30 days or until you sign out. It is required for signing in. We do not use advertising or analytics cookies.

Third parties

• The site and database run on hosting providers (for example Vercel and Neon) that process data for us.
• If image upload is enabled, images go directly from your browser to Cloudinary, and only the image link is stored by NodePaste. Cloudinary handles those files under its own policy.
• We do not sell your data or share it for advertising.

How long we keep data

Account and content data stay until you delete them. Deleting a post removes it from the site. Sessions expire automatically. Backups may keep deleted data for a short time.

Your rights

You can edit your profile any time in Settings, and you can delete your account there. Deleting your account permanently removes your profile, posts, comments and sessions. You may also complain to your data protection authority (in Turkey, the KVKK Board).

Children

NodePaste is not meant for people under 13. Do not create an account if you are under 13.

Changes

We may update this policy and will change the date above. See also the Terms of Service.