The shortest version: text you type in the ordinary editor is stored locally for recovery and is not automatically uploaded as a Cloud document. Data reaches the server when you sign in or choose a server-backed function. Optional analytics and advertising-network scripts do not load before your corresponding consent.
Controller identity
The controller for pasteToPrint is Elektroinštalácie a servis s.r.o., P. J. Šafárika 899/14, 971 01 Prievidza, Slovak Republic, company registration number 57125571.
When you place another person's personal data in a document, you decide why that document is created and shared. Depending on the context, you may have your own data-protection responsibilities for that content.
How privacy changes by feature
Personal data, purposes and legal bases
| Activity | Typical data | Purpose | Legal basis |
|---|---|---|---|
| Account and authentication | Email, display name, password hash, device and security metadata, membership status | Create and protect the account, remember a device, verify access | Contract; legitimate interests in service and account security |
| Cloud and sharing | Document content, titles, files, versions, objects, owner and collaborator details | Save, synchronize, version and share documents you request | Contract and steps requested by the user |
| LIVE, transfer and public integrations | Session identifiers, document payloads, display name, chat or media added by participants, technical metadata | Operate real-time collaboration and temporary document handoff | Contract and steps requested by the user |
| Email PDF | Recipient email address, document title and uploaded PDF | Deliver the requested PDF | Steps requested by the user; legitimate interest in delivery security |
| Enhanced extraction | Public HTTPS URL, extracted page content, request and security metadata | Fetch and clean the public page selected by the user | Steps requested by the user; legitimate interest in safe operation |
| Premium and support | Account, licence and transaction identifiers, terms and privacy versions accepted, immediate-start request, amount, currency, status and timestamps | Provide paid access, prove the order process, prevent duplicate or fraudulent transactions, keep accounting records | Contract; legal obligation; legitimate interests |
| Withdrawal and consumer requests | Name, email, contract reference, request identifier, status and timestamps | Record, confirm and handle withdrawal notices, complaints and statutory remedies | Contract; legal obligation; establishment, exercise or defence of legal claims |
| Security and support | Messages, IP or derived rate-limit keys, browser and platform details, errors and security events | Respond to requests, prevent abuse, investigate incidents and maintain reliability | Legitimate interests; legal obligation where applicable |
| Optional analytics and advertising | Page and limited interaction events, locale, entry point, paper format or feature status; online identifiers used by activated providers | Understand aggregate use, improve the product and load the optional advertising network selected by the user | Consent |
Providing data for an account or connected function is voluntary, but the function cannot operate without the fields it technically requires. pasteToPrint does not use document text to make decisions that produce legal or similarly significant effects about you.
Browser storage and local autosave
The ordinary editor uses localStorage or related browser storage for recovery copies and settings such as language, theme, document layout, custom templates, drawing recovery and toolbar preferences. This information remains on the device and browser profile until the application replaces it, you clear it, or the browser removes it.
Anyone with access to the same browser profile may be able to see locally saved content. Use a private device for sensitive documents, clear the editor and browser storage when appropriate, and keep a separate copy of important files.
Cookies and analytics
Necessary cookies support signed-in sessions, remembered devices and language continuity. Disabling them can prevent account, Cloud or security functions from working correctly. Browser storage used by the editor is not automatically the same as a cookie, but you can manage both through your browser controls.
The privacy-choice panel separates analytics from advertising. Google Analytics and the advertising-network configuration and scripts are not requested until the corresponding optional category is allowed. Analytics events are restricted and are not designed to include document body text. Import links that activate document privacy mode keep optional integrations disabled.
You can reject optional categories, allow them separately, change them later through the persistent “Privacy choices” button, or clear the saved choice in browser storage. Withdrawing consent stops future optional tracking calls but does not affect processing that was lawful before withdrawal. Browser settings and privacy extensions can also block or delete cookies and site data. More information is available in Google's Privacy Policy.
Recipients and international transfers
Data may be received by hosting and infrastructure providers, email-delivery services, an activated payment provider, professional advisers, and authorities where disclosure is legally required. Google Analytics or an advertising provider receives optional data only after the relevant consent. Collaborators and recipients you select receive the content you share with them.
Some providers, including Google, may process data outside Slovakia or the European Economic Area. Where required, such transfers must rely on an adequacy decision, standard contractual clauses or another valid safeguard. Provider privacy information describes its locations and safeguards.
pasteToPrint does not sell your documents or personal data.
How long data is kept
- Local editor data remains in your browser until replaced or cleared by you or the browser.
- While Premium is active, Cloud content is retained subject to the account's 1 GB quota. After Premium ends without another entitlement, content is read-only/export-only for 30 days; notices are queued 14, 7 and 1 day before deletion where deliverable, then active Cloud content is deleted.
- Items deliberately placed in Cloud trash are removed after 30 days. Version history keeps no more than the newest 100 versions per item and removes versions older than 90 days while preserving the newest version.
- LIVE rooms, mobile transfers, public sessions and import handoffs are intended to be temporary and are removed or made inaccessible after their operational validity or cleanup period.
- Payment, checkout acceptance, withdrawal and complaint records are retained for the periods required by tax, accounting and consumer law and, where necessary, until related claims can no longer be brought or defended.
- Security logs, rate-limit records and support messages are kept only as long as reasonably needed for protection, investigation, defence of claims and service continuity.
- The browser privacy choice remains until you replace it, clear site storage or the consent version changes. Optional provider data follows the activated provider's configured retention settings.
Deletion from active systems may not immediately remove a protected backup. Application Cloud backups are isolated, are not used for ordinary product activity and are automatically pruned after 30 days. A restored backup is subject again to the active-system deletion rules. Separate accounting backups follow mandatory legal retention and access controls.
Security measures
pasteToPrint uses measures appropriate to the service, including password hashing, access checks, CSRF and same-origin controls, rate limiting, signed or hashed tokens, content and file validation, restricted import destinations and server-side Premium verification. No internet service can guarantee absolute security.
You can reduce risk by using a unique password, protecting remembered devices, limiting sensitive content in shared links and reporting suspected unauthorized access promptly.
Your data-protection rights
Subject to the conditions in applicable law, you may request access to your personal data, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and withdraw consent at any time where processing is based on consent, without affecting earlier lawful processing.
The GDPR right to data portability concerns eligible personal data under Article 20. Product export and the statutory right to retrieve user-provided digital content after contract termination are separate rights and are provided free of charge in a commonly used machine-readable format where applicable.
You also have the right not to be subject to certain solely automated decisions with legal or similarly significant effects. pasteToPrint does not describe any such decision-making in its current service.
Requests are handled without undue delay and normally within one month. Identity may need to be verified before account or document information is disclosed or changed. A request can be refused or a reasonable fee charged only where the law permits, including for manifestly unfounded or excessive requests.
You may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic or another competent supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement.
Children and family use
pasteToPrint includes creative functions that a family or school may use, but the account and connected services are not designed to intentionally collect children's personal data without appropriate adult involvement. A parent, guardian or school should supervise use and avoid placing unnecessary child data in shared documents or public links.
Changes to this notice
This notice may be updated when features, providers, legal requirements or processing practices change. The date at the top identifies the latest version. Material changes will be communicated by reasonable means where required.
Privacy contact
Describe your request, the account email or function concerned, and the right you want to exercise. Do not send passwords or unnecessary document content. You may also use the account and Cloud controls available in the service to manage active content directly.