Legal

Privacy Policy

Last updated: April 26, 2025

Overview

Sharetext is built on a simple principle: your content is yours. Our architecture is designed so that we cannot read what you share — not because of a policy, but because of cryptography.

What we collect

Anonymous shares: Nothing. Content is encrypted in your browser before it leaves your device. The decryption key lives in the URL fragment (#…), which is never sent to our servers.

Registered accounts: We store your email address, a bcrypt-hashed password (never plaintext), an optional display name, and share metadata (title, language, expiry date, view count). We do not store share content.

Usage data: We collect basic server logs (IP address, user agent, timestamp) for security and abuse prevention. These are not sold or shared with third parties.

Encryption

All content is encrypted with AES-256-GCM in your browser using the Web Crypto API before upload. The encryption key is derived from a random secret appended to the share URL. Sharetext servers only ever receive ciphertext — we have no mathematical ability to decrypt your content.

Password-protected shares add an additional layer: the key is derived from your password using PBKDF2 (100,000 iterations, SHA-256).

Cookies & tracking

We do not use advertising cookies, third-party analytics, or tracking pixels. We use a single session cookie to keep you signed in. No data is shared with advertisers.

Data retention

Share metadata is deleted when a share expires or when you delete it from your dashboard. Account data is deleted immediately upon account deletion. We do not retain backups of deleted data beyond 30 days.

Third-party services

Sharetext is hosted on secure, globally distributed infrastructure. Our hosting provider may process request metadata (IP address, request headers) per their own privacy policy. We use Google OAuth optionally for sign-in — if you choose to sign in with Google, Google's privacy policy applies to that interaction.

Your rights

You may request deletion of all account data at any time by contacting us or using the account deletion option in Settings. For GDPR/CCPA inquiries, contact us at privacy@sharetext.cc.

Changes

We may update this policy. Material changes will be announced on this page with an updated date. Continued use of Sharetext after changes constitutes acceptance.

Contact

Questions? Reach us at privacy@sharetext.cc or through our contact page.