Privacy notice

About this notice

Pastegram is a free personal project maintained to help people create CVs, write cover letters, edit images and use PDF and image-splitting tools. This notice explains how those tools handle information. For privacy questions or requests, contact the Pastegram site operator through Private feedback.

CVs and cover letters on your device

You can use the document editors without registering. Local drafts, saved documents, profile photos included in them, and preferences such as language and theme are stored in your browser. They are not automatically copied to your account. Opening an account document in the editor can create a local working copy.

Local storage can remain after you close the browser or sign out. Other people using your device or browser profile may be able to access it. Signing out is not the same as deleting browser data. Download anything you need before removing drafts or clearing site data. Optional offline mode stores site resources in your browser; it does not provide cloud backup.

Optional accounts and account documents

Registration stores your name, email address, a password hash and account administration information, including creation time and account status. Profile information you supply, such as a username, is also stored. If you set up password recovery, we store hashed representations of your six-digit PIN and favorite-place answer. These are checked with Google verification and attempt limits when you request a password reset. Do not share them; successful resets invalidate existing sessions. Passwords are hashed rather than intentionally stored as readable text.

When you choose Save to account, the CV or cover letter content and any included profile photo are stored on the hosting server. Account copies and local copies are separate: deleting one does not automatically delete the other. Administrators can delete regular-user accounts and set a replacement password; a reset invalidates existing login sessions. Stored documents are not end-to-end encrypted, and authorised site and hosting administrators may access server records when necessary to operate or support the service.

Image editing and project files

The photo editor opens files selected on your device and edits them in the browser. Image editing itself provides local downloaded exports and project files; it does not automatically upload them. The editor stores your theme preference locally; download your image or project before leaving because the working canvas is not a guaranteed saved backup.

External-image exception: an imported project may contain links to remote images. Loading such a project can contact those external websites, which can receive your IP address and request information. Use project files from sources you trust. Site assets also require requests to our hosting server. This is why browser-based editing does not mean that the page makes no network requests.

Downloaded project files can contain embedded images, editable layers and history. Treat them as potentially sensitive and review them before sharing. If you later add an edited image to a CV and save that CV to your account, the image becomes part of the server-stored document.

Image Splitter: local images are opened, cropped and split in your browser. This tool does not upload image contents or the image URL you enter to a Pastegram processing endpoint, and it does not save a splitter project or image URL in your account or browser storage. Working image data is held in the current tab; downloaded pieces and ZIP files remain on your device until you remove them. Existing theme, language, consent and configured site analytics still apply.

If you choose Import from image URL, your browser contacts the source website. That host can receive your IP address, the requested URL and normal request information, even if the browser later blocks the import. The splitter requests images without browser credentials and with no referrer information; a host may still log the request under its own policies. We do not use a server proxy to bypass blocked hosts. Use local file upload if you do not want to contact an external website. Do not paste confidential or access-token URLs.

Private feedback and replies

Feedback is private, not a public review. We store the message, optional email address, submission time, review status and, if you are signed in, an account identifier. Administrators can review it; other users cannot browse it. Account deletion removes the feedback’s account link but does not automatically remove its message or optional email address. Mention feedback separately when requesting deletion.

The feedback page is available without signing in and requires Google verification to reduce spam. Providing a reply email is optional, but without one we may be unable to respond or complete a request that needs verification. If we correspond by email, the messages and contact details are handled through the email service used for replies. Please do not send passwords, payment information or identity documents with an initial request.

Cookies, security and hosting

Login uses a session cookie and request-protection mechanisms. The service records rate-limit identifiers derived from an IP address and action, and administration logs recording the actor, action, target identifier and time. Rate-limit records expire according to their rate window and subsequent cleanup. Hosting systems may keep IP addresses, request times, browser information and security logs.

These records help provide accounts, prevent abuse, investigate problems and maintain the service. Browser storage and cookies can be managed in your browser settings, although disabling them can prevent features from working. There is no guarantee that any online service or personal device is completely secure.

Google verification and optional analytics

Account registration and feedback use Google reCAPTCHA to prevent automated abuse. It processes browser, device and connection information for verification, and our server sends the verification token to Google. You can use guest CV and photo editing without completing these forms.

Administration pages are excluded from the supplied Analytics integration. The operator can include or exclude the photo editor separately. If the operator enables Google Analytics, it receives usage information about page visits and interactions, including browser/device and connection information, and may use cookies or similar identifiers. The configured site snippet does not deliberately submit CV text, photos, passwords, email addresses or administrator PINs as event data. External services have their own data-handling arrangements; see Google’s privacy information.

Google Analytics is blocked until you accept optional analytics through our cookie controls. Rejecting optional analytics does not prevent guest editing or account access. You can change or withdraw your choice using Cookie settings. Your choice is stored in this browser for 180 days. See our Cookie and browser storage policy for details. Locally bundled fonts and scripts are served by the site rather than requiring a third-party font request for normal operation.

Storage duration, providers and deletion

Browser copies remain until removed through the tools, browser settings or browser storage management. Account data and documents remain while the account is retained, unless individual documents or the account are deleted. Feedback and administration records are not automatically erased merely because a user signs out or deletes a CV; they remain until removed by the operator. There is currently no fixed automatic deletion schedule for those records.

Hosting, email and enabled Google services process information as needed to provide their services. Their infrastructure may be in a country different from yours. Removing an active record does not necessarily immediately erase hosting backups or logs; any remaining copies depend on the provider’s retention arrangements and applicable requirements. Contact us for information about your request rather than assuming deletion is instantaneous across every system.

Your choices and privacy requests

You can edit your account profile, manage documents through the dashboard, and use guest tools instead of account storage. To request access, correction, account removal, removal of feedback or information about other privacy rights available under applicable law, use Private feedback. Identify the relevant account or submission without sending your password. We may need proportionate verification before disclosing or deleting account information.

Some records may need to be retained for security, dispute handling or legal requirements; we will explain relevant limits when handling a request. We cannot remotely delete downloads or every local copy on your devices. You may also raise a concern with the relevant data-protection authority where applicable.

Use with care and future changes

Only provide information and images you are entitled to use. Avoid unnecessary sensitive information in a CV, photo or feedback message. The service is not designed to collect children’s information; if a child has supplied personal data, contact us so it can be reviewed. This notice may change when features or data practices change. The date above identifies this version; material changes will be described in an updated notice.

Advanced image editor

The advanced image editor processes photo effects, masks, overlays, batch exports, RAW development and ICC conversion locally in your browser. The RAW decoder and colour engine load from this site; these workflows do not send your photo or printer profile to a separate conversion service. Named mask and effect preset libraries are stored in this browser. Editable project files may contain working source photos, masks and adjustment settings. Downloaded images are flattened; deleting them from the canvas does not delete an existing project or download. Clear local libraries using their Delete controls or browser site-data controls. Existing account-saving and external URL-import actions remain separate choices described above.

Daily document tools and Banner Studio

Image/PDF to Text and Document Scanner process selected images and PDFs in your browser. OCR language models and PDF-processing resources are downloaded from Pastegram; document contents are not sent to an external OCR service. Extracted text can be inaccurate. Scanner pages and OCR results are working data, not an automatic account backup: download the PDF or text you need before closing the tool.

Invoice Maker, Receipt Maker and Quotation Maker process business details, customer details, logos and line items in your browser. Account saving is not provided for these documents. Optional remembered drafts are stored on that device; exported editable JSON, CSV and PDF files may contain the information you entered. Clearing browser storage can remove device drafts. Review the files before sharing them.

Banner Studio provides 600 editable templates and locally served illustrations, plus a bundled AI-generated café photograph in selected designs. Opening a template passes an editable project to the image editor through browser session storage. Uploaded replacements and downloaded projects may contain personal images or embedded content. Generating the bundled photograph did not involve your uploads; using these templates does not send your documents or images to an AI-generation service.

Google sign-in and account deletion

If you choose Continue with Google, you are sent to Google to authenticate. Pastegram receives your Google account identifier, verified email address and profile name for account creation or linking. This login does not request access to your Gmail messages, Drive files or contacts. Google processes the sign-in under its own privacy policy. Google-only users manage recovery through Google; the Pastegram recovery-setup popup is skipped for Google sign-in sessions.

Regular users can request permanent account deletion from My dashboard → Delete my account, after password or linked-Google verification and explicit confirmation. This removes the account and account CVs/letters, document history, application sets, recovery settings and Google account link. Browser copies, downloaded files, existing private feedback, security logs and operational backups are not erased by this action. Contact the operator for other privacy requests.

Word Games and private progress

Word Games puzzles run in your browser using a small vocabulary served by Pastegram. Guest progress, unfinished rounds and preferences are stored on this device. Signing in lets you explicitly save completed round results, puzzle identifiers, game/language, dates, points and hint use privately to your account. No public leaderboard, chat or multiplayer service is provided. The My progress controls export or delete game results. Clear site data to remove local drafts and preferences. Account deletion removes account game progress; operational backups may retain earlier copies under the existing backup policy. Ordinary site security logs and any separately enabled analytics follow this notice.

Games and saved progress

Word, number and logic games can be played as a guest. Your active puzzle, settings and guest progress are saved in this browser. If you sign in, completed game results can also be synchronized to your Pastegram account. This update does not upload puzzle-board contents, introduce a public leaderboard or add a new analytics service. Clearing browser storage removes local progress; downloaded progress files are separate.

Web Tools

Most Web Tools process text, images and calculations in your browser. The MD5 tool sends the entered text to Pastegram to calculate a checksum; the tool does not retain that text. The IP tool reports the connection address seen by the server. Normal hosting logs and the site’s existing analytics settings still apply. The YouTube thumbnail tool generates external image links; opening those links connects to YouTube’s image service.

Favorites store tool identifiers on your device when you select a star. Inputs, results, generated passwords and uploaded images are not saved by Web Tools or synchronized to your account.

Competition uploads, guests and public galleries

When enabled, organizers can invite up to ten existing Pastegram accounts to judge. An invitation grants no access until accepted. Accepted judges can view only eligible entries whose contributors have explicitly allowed judge access; contributors can withdraw that permission. Judges do not receive guest email addresses or album-management controls. We store judge account references, invitation status, individual scores, private notes and update times. Removing or leaving an assignment removes access; historical scores can remain available to the organizer and site administrators until the entry, album or related account is deleted. Replacing an image clears its judge scores.

Optional entry records include a contributor’s rights declaration, declared AI use, checklist confirmation and their timestamps. Format and dimension checks verify configured technical requirements, not copyright ownership or the truth of a declaration. Existing entries receive no invented declaration or judge permission. Private CSV downloads are available only to the organizer and authorized site administrators when enabled. Entry exports include the applicable entry metadata and score summaries; judge exports include individual scores and private notes. Guest contact emails and session secrets are excluded. Exported copies remain under the recipient’s control.

Optional competition features store submission titles and descriptions, revision numbers, rules and accepted image requirements, private organizer scores/notes and shortlists, winner places and public feedback, voting preferences and separate deadlines. Organizer scores, notes and shortlists are available only to the organizer and authorized site administrators. Invited judges can submit and see their own individual scores and notes; they cannot see another judge’s private notes. Organizers and authorized site administrators can review the individual judge scores and notes. Anonymous judging hides contributor display names until names are revealed or results are published; images, captions and comments may still identify someone. Site administrators can disable this feature and reveal names. This is not a guarantee of anonymity.

Signed-in organizers and participants may receive in-site activity notifications when enabled. These contain account/content references and status, are visible only in that account, and expire from the application after 90 days through scheduled maintenance. This feature does not send email notifications. Replacing an image deletes its prior votes, approval, image comments and judging scores after confirmation. Previously downloaded copies cannot be recalled. Organizer/admin ZIP downloads contain accessible shortlisted or winning stored image copies. Reusing a competition copies its brief and enabled settings into a new private album, without copying entries, votes or participants.

Approved public images can receive image-specific comments and votes. Public pages show vote totals and commenters’ usernames, not guest email addresses or a voter list. Votes are linked to the existing account or guest session. We store a keyed hash of the request network address to limit duplicate guest votes; shared networks may therefore share a guest voting limit. This is an abuse-control measure, not verification of a unique person. Votes and image comments are removed with the corresponding image or album.

Updated 3 November 2026. Creating an album requires a Pastegram account. Participants can submit through an invitation link using an account or, when enabled, a guest username and email address. Guest comments require a username; an email is required when uploading an image. We store album details, organizer/account identifiers, guest usernames and supplied emails, image contents and sizes, submission times, deadlines, publication permissions, winners, comments, reports and moderation records.

Guest email addresses are checked for format but are not verified. They do not prove identity and cannot be used to sign in, recover a submission or take over a username. The existing essential browser session holds a secret that allows the submitting guest to manage their entries and comments in that browser session. Clearing site data, signing out or losing that session may remove this access; it is not an account backup. Guest usernames are checked against existing account names/usernames and claimed competition guest names when submitted. A Guest label distinguishes guest activity from registered accounts.

In private albums, participants can see their own entries in the authenticated account or original guest session. The organizer can see and download entries in their album and see submitted guest contact email addresses. Unlocked site administrators can inspect all albums, images, comments and reports for service operation and moderation. Submitted guest contact email addresses are displayed only to the album organizer in the competition interface. Authorized service operators may process stored records for security, maintenance or legal obligations; database access and backups are not public competition views. Other participants do not receive private entries or guest email addresses. The short invitation link permits submissions and reveals the album title/instructions to its holders; it is not permission to browse other private entries. A forwarded invitation may allow additional people to submit. Replacing an invitation invalidates the previous invitation but does not remove existing contributors’ access to their own entries.

Organizers may explicitly publish an album. Anyone can then browse entries that have contributor publication permission and moderation approval. Existing private entries receive no automatic publication permission during upgrade. Contributors may grant or withdraw public-display permission using their entry controls. Guest images await organizer or site-administrator review before public display by default; site administrators can change this setting. Per-image voting and new comments additionally require explicit organizer approval. Approved public comments display usernames and comment text. Guest email addresses and session secrets never appear in the public gallery. Removing permission, hiding content or making an album private stops normal access, but cannot retrieve downloads, screenshots or copies already made. Public albums and gallery URLs are deliberately noindex and excluded from the supplied sitemap; that does not make public content confidential or prevent non-compliant bots from copying it.

Uploads are sent to Pastegram’s server, unlike our local editing tools. JPEG, PNG and WebP files are decoded and re-encoded with embedded metadata removed; PNG transparency is preserved, while lossy formats can change fine detail. Keep originals separately. Files are in protected server storage and served through access checks. Data is not end-to-end encrypted, and hosting/site operators may access server records for operation, support and security. This tool does not send images or comments to an external AI, image-analysis or automated adult-content detection service.

Moderation is performed by people. Site administrators can approve, hide or delete images; hold, privatize, close or delete albums; manage comments and reports; and change limits. Reports and audit records contain relevant identifiers, text/reasons, administrator actions and timestamps. Keyed hashes of the network address and browser/account identifiers support short-lived rate limits, and the host may keep separate connection/security logs. Public comments are escaped plain text and do not execute user HTML. Competition pages omit the supplied analytics loader and use the existing theme/language preferences and essential session cookie, without adding an advertising cookie.

Closing a competition stops uploads and participant withdrawals; it does not delete entries or automatically close comments. Contributors can withdraw entries before closing. Organizers and site administrators can delete albums with confirmation; access is disabled immediately and physical cleanup is attempted, with failed cleanup retried by the documented maintenance task. Account deletion makes organizer albums inaccessible to ordinary visitors; maintenance removes their records/files and entries or comments from deleted member accounts. Unused guest identities with no entries or comments may be cleaned after 30 days. Active albums, comments, reports and audit records otherwise have no fixed automatic age-deletion schedule in this version. Logs/backups follow the operator/provider’s arrangements. Database-only backups do not include private image files. Use Private feedback for privacy or abuse requests, identifying the album without providing passwords or guest session secrets.

Optional profile picture

You may upload, replace or remove a profile picture in Account settings. The server crops and resizes it to a 256-pixel square JPEG and does not keep the original upload or embedded metadata. The saved picture is stored with your account in the site database and appears in your signed-in menu. Picture requests require your account session; this feature does not create a public profile gallery. Removing the picture deletes its current stored copy. Deleting the account removes the picture through the database relationship; existing database backups follow the site backup retention. Keep a separate original if you want one.

Email password reset

Password accounts can request a single-use reset link sent through the configured email provider. Reset links expire after 30 minutes. We temporarily store a token hash, account email, account reference, session version and expiry, plus short-lived abuse-prevention counters. The raw token is not stored in the database or sent in URL requests; it is included in the email link and submitted when you choose a new password. Expired and orphaned reset records are removed on subsequent reset requests. Successful resets invalidate existing account sessions. Google-linked accounts use Google sign-in and recovery. Recovery PINs and security answers can no longer reset a password; older hashes, if present, are inactive.

Magazine Maker files and drafts

Magazine Maker processes your issue text and selected photos in your browser. Drafts, saved issues, layouts and checkpoints are stored in this browser and can be removed by clearing Pastegram’s site data. Downloaded project, PDF and web edition files remain wherever you save them. Review an exported edition before sharing it.