PasteAndCheck

Privacy Policy

Last updated: June 30, 2026

PasteAndCheck (“we,” “us,” or “our”) is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your choices.

1. Information We Collect

Information you provide

  • Email address — collected when you sign in or create an account. We use magic links (no password stored).
  • Text you submit for analysis — the message or content you paste into PasteAndCheck. This is sent to our AI provider for analysis and stored in our database associated with your session.

Information collected automatically

  • IP address — logged with each check request for abuse prevention and rate limiting. Not linked to your identity unless required by law.
  • Session identifiers — anonymous session tokens stored in your browser to track your free check count before you sign in.
  • Usage data — check counts, subscription status, and timestamps. No advertising analytics or cross-site tracking.

Payment information

We do not store credit card numbers or bank account details. All payments are processed by Stripe. We receive only a customer identifier and subscription status from Stripe.

2. How We Use Your Information

  • To provide the scam analysis service
  • To enforce free-tier limits and Fair Use Policy
  • To send transactional emails (magic links, receipts) via Resend
  • To detect and prevent abuse, fraud, and automated access
  • To improve our AI prompts and analysis accuracy (in aggregate, not individually)

We do not use your submitted text for AI training, advertising, or any purpose other than providing and improving the service.

3. Third-Party Services

We share data with the following providers to operate the service:

  • Anthropic (Claude API) — your submitted text is sent to Anthropic's API for analysis. Anthropic's privacy policy governs their handling of API data. API inputs are not used to train Anthropic's models.
  • Stripe — payment processing. See Stripe's privacy policy.
  • Resend — transactional email delivery (magic links, receipts).
  • Vercel — hosting and infrastructure. Logs may include IP addresses and request metadata per Vercel's standard practices.

We do not sell your data to any third party.

4. Data Retention

We retain your submitted text and analysis results for as long as your account is active and for a reasonable period thereafter for abuse prevention purposes. Anonymous session checks (before sign-in) are retained for 90 days.

You may request deletion of your account and associated data by emailing us at support@pasteandcheck.com. We will process deletion requests within 30 days.

5. Cookies and Local Storage

We use browser local storage to store your anonymous session ID and free check count. No third-party advertising cookies are set. Authentication sessions use a secure, HTTP-only cookie managed by NextAuth.

6. Children's Privacy

PasteAndCheck is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Data portability (receive a copy of your data in a common format)

To exercise any of these rights, email support@pasteandcheck.com. We will respond within 30 days.

8. Security

We use HTTPS for all data in transit. Database access is restricted and credentials are never exposed client-side. We do not store raw card numbers, passwords, or other high-sensitivity credentials.

No system is perfectly secure. If you discover a security vulnerability, please report it to support@pasteandcheck.com rather than disclosing it publicly.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email to registered users. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

10. Contact

Questions about this Privacy Policy? Email us at support@pasteandcheck.com.