html by me

Draft — pending legal review

Privacy

Privacy

No accounts. No ads. No cookies. Below is everything that is actually stored.

What is stored when you publish

  • The HTML file itself — that is what the link serves.
  • Timestamps for creation, update and expiry, plus the file's size and ETag.
  • A salted hash of the update key that authorises deletion. The key itself is not stored.

Network identifier

IP addresses are not stored. The abuse audit log and the rate limiter use a short hash instead — an HMAC-SHA256 keyed with a server secret, truncated to 80 bits, over the full address for IPv4 and the /64 prefix for IPv6, and rotated daily. It is not reversible without the secret, and it cannot link the same visitor across days.

Server logs go through one redacting logger that strips credentials by key name and by value shape. A logged request carries its method and path, and nothing else.

Cookies

There are no cookies — none for tracking, none for analytics, and none for access. The language you pick on this site stays in your browser's localStorage and is never sent to the server.

Reports

When you send a report we store the reason, the URL you reported, whatever description and contact you chose to leave, and the network hash above. A human reads it. The contact field is optional.

Retention

A file you publish is deleted when its link expires, 15 days after you created it — the first visit to an expired link deletes it, and a scheduled sweep catches any that nobody visits. So that the link can tell a visitor it has expired, a tombstone holding only the code and the timestamps is kept for at least 90 days, after which the link becomes a 404. Audit records and reports are kept as long as handling abuse needs.

What we do not do

  • No accounts — so no user record, no email address, no session and no profile anywhere in the system. The only thing tying a page to a person is the update key held briefly by the tab that published it, and that is stored only as a salted digest.
  • No ads, ad networks or third-party analytics.
  • We do not sell or share your content.
  • Published pages are marked noindex. Anyone with the link can still read them.

Draft — pending legal review.