Legal
Privacy Policy
Last updated: April 26, 2025
Overview
Sharetext is built on a simple principle: your content is yours. Our architecture is designed so that we cannot read what you share — not because of a policy, but because of cryptography.
What we collect
Anonymous shares: Nothing. Content is encrypted in your browser before it leaves your device. The decryption key lives in the URL fragment (#…), which is never sent to our servers.
Registered accounts: We store your email address, a bcrypt-hashed password (never plaintext), an optional display name, and share metadata (title, language, expiry date, view count). We do not store share content.
Usage data: We collect basic server logs (IP address, user agent, timestamp) for security and abuse prevention. These are not sold or shared with third parties.
Encryption
All content is encrypted with AES-256-GCM in your browser using the Web Crypto API before upload. The encryption key is derived from a random secret appended to the share URL. Sharetext servers only ever receive ciphertext — we have no mathematical ability to decrypt your content.
Password-protected shares add an additional layer: the key is derived from your password using PBKDF2 (100,000 iterations, SHA-256).
Cookies & tracking
We do not use advertising cookies, third-party analytics, or tracking pixels. We use a single session cookie to keep you signed in. No data is shared with advertisers.
Data retention
Share metadata is deleted when a share expires or when you delete it from your dashboard. Account data is deleted immediately upon account deletion. We do not retain backups of deleted data beyond 30 days.
Third-party services
Sharetext is hosted on secure, globally distributed infrastructure. Our hosting provider may process request metadata (IP address, request headers) per their own privacy policy. We use Google OAuth optionally for sign-in — if you choose to sign in with Google, Google's privacy policy applies to that interaction.
Your rights
You may request deletion of all account data at any time by contacting us or using the account deletion option in Settings. For GDPR/CCPA inquiries, contact us at privacy@sharetext.cc.
Changes
We may update this policy. Material changes will be announced on this page with an updated date. Continued use of Sharetext after changes constitutes acceptance.
Contact
Questions? Reach us at privacy@sharetext.cc or through our contact page.