Privacy PolicyLast updated: 22 October 2026
This policy explains what personal data Code Bin collects when you use codebin.site, why we collect it, who we share it with and the rights you have over it. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The short version
- We collect only what we need to run Code Bin: your account details if you sign up, the pastes you create, and basic technical data needed to keep the site secure.
- We only use analytics cookies if you agree to them, and you can change your mind at any time.
- We don’t sell your data and we don’t show adverts.
- Public and unlisted pastes can be seen by anyone with the link, so don’t put personal or sensitive information in them.
Who we are
Code Bin (“we”, “us”) is the controller of the personal data described in this policy. Code Bin is run from the United Kingdom. You can contact us about anything in this policy at [email protected].
What we collect
Account information
Accounts are optional. If you create one, our authentication provider, Clerk, collects and stores on our behalf:
- your email address and, if you choose one, your password;
- your username, first and last name, and profile picture, if given;
- if you sign in with another service (such as GitHub, Google or Discord), the basic profile details that service shares with us, such as your name, email address and avatar;
- sign-in and session records, such as the time, IP address, browser and device used, which are used to keep your account secure.
Pastes
When you create a paste we store its contents, title, description, language, visibility setting, creation date, its URL and, if you’re signed in, your account ID. If you set a password on a paste, we store only a one-way hash of it, never the password itself.
Technical data
Like most websites, our hosting provider records basic request information, such as IP address, browser type, the page requested and the time of the request. We use this only to run the site, investigate errors and protect against abuse.
Analytics (only with your consent)
If you accept analytics cookies, we use Google Analytics to understand how the site is used in aggregate, such as which pages are visited and roughly where visitors come from. Google Analytics does not log or store IP addresses, and we don’t use it to identify you or link it to your account. If you choose “Essential only”, Google Analytics is never loaded. See our Cookie Policy for details.
When you contact us
If you email us or report content, we keep your message and email address so we can reply and keep a record of the issue.
Why we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Creating and running your account, storing and showing your pastes | Performance of a contract (our Terms of Service) — Article 6(1)(b) |
| Keeping the site secure, preventing spam and abuse, fixing errors | Legitimate interests in running a safe, reliable service — Article 6(1)(f) |
| Reviewing reported content and handling complaints | Legal obligation (including the Online Safety Act 2023) and legitimate interests — Article 6(1)(c) and (f) |
| Analytics | Consent — Article 6(1)(a). You can withdraw it at any time. |
| Replying to you and responding to lawful requests | Legitimate interests and legal obligation — Article 6(1)(f) and (c) |
We don’t use your data for automated decision-making or profiling that has legal or similarly significant effects on you, and we don’t send marketing emails.
Who we share it with
We don’t sell or rent your personal data. We share it only with service providers who process it on our behalf under written agreements, and only as needed to run Code Bin:
- Clerk — sign-up, sign-in and account management.
- Supabase — database that stores pastes.
- Our hosting provider — serves the website and keeps request logs.
- Google — Google Analytics, only if you consent.
We may also disclose data if the law requires it, for example in response to a valid court order, or where it’s necessary to protect someone’s safety. Our Legal Request Guidelines explain how we handle these requests. If Code Bin is ever transferred to a new owner, your data would pass to them under this policy, and we would tell you first.
International transfers
Some of our service providers store or process data outside the UK, including in the United States and the European Economic Area. Where data leaves the UK, we rely on UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum, so that your data stays protected to the standard UK law requires. Contact us if you’d like more detail.
How long we keep it
- Account data is kept while your account exists and removed when you delete it.
- Pastes are kept until you delete them, or until we remove them for breaking our Terms. You can delete your pastes at any time from My pastes. Pastes created without an account can’t be linked to you, so contact us if you need one removed.
- Request logs are kept by our hosting provider for a short period and then deleted automatically.
- Analytics data is kept by Google for no more than 14 months.
- Emails and reports are kept for as long as needed to deal with the issue, and for up to two years afterwards in case it comes up again.
We may keep specific data for longer if we’re legally required to, or if it’s needed for an ongoing investigation or legal claim.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to how we use your data;
- receive your data in a portable format, or have it sent to another service;
- withdraw your consent at any time, where we rely on consent (this doesn’t affect anything we did before you withdrew it).
You can update your account details and delete your account from your profile page. For anything else, email [email protected]. We’ll respond within one month, and we may ask you to confirm your identity first. Exercising your rights is free.
If you’re unhappy with how we’ve handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Public content
Public pastes are listed on our home page and can be seen, copied and indexed by search engines. Unlisted pastes don’t appear in lists, but anyone with the link can open them. If you sign in, your display name and profile picture are shown on your pastes and on your public profile page. Please don’t post anyone’s personal information, including your own, in a paste you wouldn’t want made public.
Security
All traffic to Code Bin is encrypted with HTTPS, our database is only accessible from our servers, and access to personal data is limited to the people who need it to run the service. No system is perfectly secure, but if a breach affects your data and puts you at risk, we’ll tell you and the ICO as the law requires. See our Security Disclosure for more.
Children
You must be at least 13 to use Code Bin. We don’t knowingly collect personal data from children under 13. If you believe a child under 13 has given us their data, contact us and we’ll delete it.
Changes to this policy
We’ll update the date at the top of this page whenever this policy changes. If we make a significant change, we’ll tell signed-in users by email or with a notice on the site before it takes effect.
Contact us
Email [email protected] with any questions about this policy or your data.