Privacy Policy

The short version: we cannot read what you send. Your content is encrypted on your device with a key that never reaches our servers, and everything is deleted after 48 hours.

一句话:我们看不到你送的内容。它在你的装置上就用一把从来没上过服务器的钥匙加密了,而且 48 小时后全部删除。

What we receive / 我们收到什么

• Encrypted content. Text, images and files, already encrypted (AES-GCM) on your device. We store the ciphertext only. We do not hold the key and cannot decrypt it.
  加密后的内容。文字/图片/档案在你的装置上就用 AES-GCM 加密好了;我们只存密文,手上没有钥匙,解不开。
• Your email address and a provider user id, when you sign in with Apple or Google — used only to recognise you and link your own devices together.
  你的 email 与该供应商给的使用者编号(用 Apple / Google 登入时)—— 只拿来认出是同一个人、把你自己的装置串在一起。
• Device names you choose, and technical metadata we cannot avoid seeing: the size of each item, its type (text / image / file), and its mime type.
  你自己取的装置名,以及藏不住的技术资料:每条的大小、类型(文字/图片/档案)与 mime。
• A push token per device, so we can tell your other devices that something arrived. The push itself carries no readable content.
  每台一枚推送凭证,用来通知你的其他装置「有东西来了」;推送本身不带看得懂的内容。

File names are encrypted too. We never see them in the clear.

档名也是加密的,我们看不到明文。

What we do not do / 我们不做的事

• No advertising, no analytics, no tracking, no profiling.
  没有广告、没有分析、没有追踪、不做用户画像。
• We do not sell or share your data with third parties.
  不卖、不给第三方。
• We do not read, scan or index your content — we could not, even if asked.
  不读、不扫、不建索引 —— 就算有人要求也做不到。

Where it is stored / 存在哪里

On our own Cloudflare infrastructure (Workers, KV and R2), and nowhere else. Push notifications are delivered through Apple's APNs. Sign-in is verified against Apple's and Google's public keys.

只在我们自己的 Cloudflare 基础设施上(Workers / KV / R2),没有别的地方。推送经 Apple APNs 送达;登入用 Apple 与 Google 的公开金钥验签。

How long / 留多久

48 hours. Every item expires automatically on the server and on each device. There is no "keep forever" option and no backup — VicPaste is a clipboard, not storage. Your account and device list stay until you sign out or remove the device.

48 小时。每一条在服务器与每台装置上都会自动过期。没有「永久保存」这个选项,也没有备份 —— VicPaste 是剪贴板,不是储存空间。帐号与装置清单会一直留着,直到你登出或移除那台装置。

Your choices / 你可以做的

• Remove a device at any time — it loses access immediately, and the group key is rotated so it can never read anything new.
  随时可以撤掉一台装置 —— 它马上失去存取权,而且群组钥匙会换掉,它从此读不到任何新内容。
• Sign out on a device to delete its local copy and its key.
  在某台登出会删掉它本机的内容与钥匙。
• Write to us at licences@victech.my to have your account removed.
  要删帐号写信到 licences@victech.my。

Children / 儿童

VicPaste is not directed at children under 13.

VicPaste 不面向 13 岁以下儿童。