Privacy Policy

Effective date:

This Privacy Policy explains how Copytonet ("we," "us," "our," or "the Service") collects, uses, and protects information when you use copytonet.com. Copytonet is a tool for temporarily copying, pasting, and transferring text between devices, with an optional account sign-in for extended features.

1. Information We Collect

Anonymous use. You can use the core copy/paste feature without creating an account or providing any personal information. When you do, we collect only:

The text you submit (up to 1024 bytes per entry)
A randomly generated key used to retrieve that text
Standard technical data such as your IP address and request metadata, collected automatically by our web server for security and operational purposes

Signed-in use. If you choose to sign in, we use a third-party identity provider (Keycloak) to authenticate you. Depending on your identity provider account, this may share the following with us:

Email address
Username / preferred username
Display name (and given/family name, if provided by your identity provider)
Group or role memberships associated with your account

2. How We Use Information

To operate the copy/paste and account-based features of the Service
To authenticate signed-in users and personalize the application experience
To maintain the security, integrity, and reliability of the Service
To respond to support requests sent to us directly

We do not sell your information, and we do not use your submitted text content for advertising or profiling.

3. Data Retention

Text submitted through the anonymous copy/paste feature is stored only temporarily — currently for approximately 5 minutes — after which it is automatically deleted. You may also delete a stored entry yourself at any time using its key, via the "Delete this key" option.

Account information managed by our identity provider is retained in accordance with your account settings and our operational needs, until you request deletion or close your account.

4. Encryption ("Secure Upload")

The Service offers an optional "Secure Upload" mode. When used, your text is encrypted in your own browser (client-side, using AES-GCM) with a password you choose before it is sent to our servers. We never receive your password and cannot decrypt this data ourselves — only someone with the correct password can retrieve the original text. Because we cannot recover a lost password, please keep it safe.

Even with encryption, this Service is intended for non-sensitive, short-lived text transfers, not as a substitute for a dedicated secure storage or communications tool.

5. Cookies

We use a small number of cookies, only after you accept them via the cookie banner:

cookieConsent – records your cookie preference
theme – remembers whether you prefer light or dark mode

If you decline cookies, no preference cookies are set and any existing cookies are cleared. Signed-in sessions may additionally rely on authentication cookies required for the login feature to function.

6. Data Sharing

We do not sell or rent your personal information. We may share information with:

Our authentication provider, solely to enable sign-in functionality
Service providers who host our infrastructure, strictly to operate the Service
Authorities, where required by law or to protect the security of the Service and its users

7. Your Choices and Rights

You can use the core Service anonymously without providing any personal information
You can decline cookies at any time via your browser or the cookie banner
You can delete a stored text entry using its key
Depending on your location, you may have rights to access, correct, or delete personal data we hold about you, and to object to certain processing. To exercise these rights, contact us using the details below

8. Data Security

We use industry-standard measures, including HTTPS/TLS encryption in transit, to protect information handled by the Service. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to children, and we do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact:

Abdullah Khalil
abdullah.khalil@copytonet.com

← Back to Copytonet