Data encryption and security

Encryption in Transit

Squarepaste encrypts all data in transit:

• All traffic to Squarepaste uses HTTPS
• Data is encrypted between your browser and Squarepaste servers
• Files and media are encrypted during upload and download
• Real-time connections use secure WebSocket protocols

This ensures that your communications cannot be intercepted or read by third parties while in transit.

Data at Rest Encryption

Your data is also protected when stored:

• Message text is encrypted in our database with AES-256-GCM, using a key held only by the server
• Sign-in tokens for connected Squarespace accounts are encrypted the same way
• Files are stored in a private storage bucket, not a public folder

Authentication and Access Control

Squarepaste implements multiple layers of access control:

• Secure password hashing using bcrypt
• Sign in with Google
• Session management with secure tokens
• New accounts confirm their email with a 6-digit code

Secure File Storage

Files shared through Squarepaste are stored securely:

• Files are kept in a private storage bucket
• File links are only given to people signed in to that project
• Everything is deleted permanently 30 days after you delete your account

Privacy Protection

Your privacy is protected through:

• No selling of your data, and no sharing for marketing
• Minimal data collection (only what's necessary)
• Clear data retention policies
• Your right to delete your data at any time

Regular Security Updates

Squarepaste maintains security through:

• Regular security updates and patches
• Monitoring for security vulnerabilities
• Responsive security incident handling
• Transparent communication about security issues

Your security is our priority. If you have any security concerns or notice anything suspicious, contact our support team immediately.