Privacy Policy

When you visit the Site, we may collect limited, non-personal information through analytics cookies, only with your explicit consent. This is aggregated and includes page views, referring URLs, and approximate geographic region. See our Cookie Policy for full details.

If you contact us by email (for example, to request a demo), we store what you voluntarily provide.

The PasteWarden browser extension enforces clipboard policy on-device. Specifically, the Extension:

• Does not track your browsing history or general browsing activity.
• Does not read the contents of pages you visit, except at the moment of an active clipboard copy or paste action that triggers a policy evaluation.
• Does not capture keystrokes, passwords, form inputs, or files.
• Does not access cookies, localStorage, or session data from other sites.
• Does not collect device identifiers, IP addresses, or geolocation.
• Does not transmit clipboard contents themselves. The evaluation produces a match / no-match signal; the underlying content stays on the device.
• Content-based redaction is performed locally. Redacted fragments never leave your browser.
• Does not share data with advertisers, data brokers, or third parties.

For enterprise deployments, aggregated audit metadata (not content) is transmitted to your organisation's PasteWarden dashboard for compliance reporting. Your organisation's administrators see that a clipboard event occurred, the category it matched (e.g., 'PHI'), and the outcome (blocked / redacted / allowed), but not the underlying content.

When the Extension is deployed by an organisation, IT administrators configure policies through a central management console. The Extension enforces these policies locally. Administrators receive aggregated, anonymised reports on policy events but do not receive the underlying user content that triggered those events.

The limited information we collect via the Site is used to understand how visitors interact with our website (anonymised analytics), respond to enquiries and demo requests, and improve our services. We do not sell, rent, or share personal information for marketing purposes.

We implement appropriate technical and organisational measures to protect any information we hold. Our infrastructure uses encryption in transit (TLS 1.3) and at rest (AES-256). Access to systems is restricted on a least-privilege basis with multi-factor authentication.

Analytics data is retained in aggregated form for up to 14 months, then automatically deleted. Contact information provided via email is retained only as long as necessary for the purpose it was collected, typically no longer than 24 months.

Under the UK Data Protection Act 2018, GDPR, and equivalent frameworks, you may have the right to access, correct, or delete personal data we hold; to object to or restrict processing; to withdraw consent for analytics cookies; and to lodge a complaint with the UK ICO or your national data-protection authority. Contact privacy@pastewarden.com to exercise any of these rights.

Our Site uses Google Analytics 4 for anonymised analytics, loaded only after consent. We do not use any other third-party tracking or advertising services. The Extension does not load or interact with any third-party services at runtime.

Our Site and Extension are not directed at individuals under the age of 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. When we do, we will revise the 'Last updated' date at the top of this page. Substantial changes will be announced on the Site.