GDPR Compliance

GDPR Compliance – GistPad.com

Effective Date: November 14, 2025

At GistPad.com, we are committed to full compliance with the General Data Protection Regulation (GDPR). We respect your privacy and ensure that you stay in complete control of your personal data. This page explains how we collect, process, store, and protect data from users in the EU/EEA.

1. What Data We Collect

We only collect the minimum information needed to operate the platform, including:

• Email address (for accounts and communication)
• Username and hashed password
• IP address (security, anti-spam, abuse prevention)
• Uploaded content such as pastes, gists, titles, and tags
• Technical logs such as browser type and access times

2. How We Use Your Data

Your data is used only for essential service operations, such as:

• Creating and managing your account
• Improving security and preventing abuse
• Providing AI features like title and tag suggestions
• Ensuring website stability and performance

3. Legal Basis for Processing

Under GDPR, GistPad.com processes data based on:

• Legitimate interest – security, service improvement
• Consent – when you create an account or submit content
• Contractual necessity – providing the platform features

4. Data Retention

We keep your data only as long as necessary:

• Your account and pastes remain until you delete them
• Security logs are retained for a limited period
• Deleted content is permanently removed from our servers

5. Your GDPR Rights

All EU/EEA users have the following rights:

• Right to access your data
• Right to correct incorrect information
• Right to delete your data (“Right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to withdraw consent at any time

To use any of these rights, email us at [email protected].

6. Data Protection Measures

We take security seriously and use:

• Strong encryption and hashed passwords
• Firewall and DDoS protection
• Spam and malicious-link detection
• Regular security reviews

7. Third-Party Services

GistPad.com does not sell, rent, or trade your data with advertisers. We only use trusted service providers when necessary (such as email delivery providers) and they are bound by GDPR-compliant agreements.

8. Cookies and Tracking

We use minimal cookies — mostly for login sessions, security, and functionality. We do not use tracking or advertising cookies.

9. Data Transfers Outside the EU

If data is processed outside the EU, we ensure it is protected under GDPR-approved mechanisms such as Standard Contractual Clauses (SCCs).

10. Children’s Privacy

GistPad.com is not intended for children under 13. We do not knowingly collect data from children.

11. Updates to This GDPR Statement

We may update this page to reflect new legal or operational requirements. All changes will be posted with an updated date.

12. Contact Information

If you have questions about GDPR or your data, contact us at: [email protected]

Disclaimer: GistPad.com is an independent platform developed and maintained by its own team. It is not affiliated with, sponsored by, or endorsed by GistPad.dev, GitHub Inc., or Pastebin.com. All trademarks and brand names mentioned are the property of their respective owners and are used for identification purposes only.