kaf.sh

Privacy Policy

How we collect, use, and protect your information

Last updated: August 2025

Introduction

kaf.sh ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our URL shortening and pastebin services.

By using our service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.

Information We Collect

Account Information

When you create an account through Discord OAuth, we collect:

  • Discord username and user ID
  • Discord profile avatar (if available)
  • Email address associated with your Discord account

Content Information

  • URLs you submit for shortening
  • Custom aliases and titles you create
  • Text content and code you paste
  • Metadata such as creation dates and settings

Basic Click Data

  • When someone clicks your links (timestamps)
  • What page sent them to your link (referrer)
  • Basic info like browser type and country (for the stats page)
How We Use Your Information

We use the collected information for the following purposes:

  • Provide and maintain our URL shortening and pastebin services
  • Process and respond to your requests and transactions
  • Show basic usage statistics (click counts, view counts)
  • Improve our services and develop new features
  • Ensure security and prevent abuse of our platform
  • Communicate with you about service updates and support
  • Comply with legal obligations and enforce our terms
Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party services (Supabase, Discord) that help operate the platform
  • Legal Requirements: When required by law, court order, or government request
  • Safety and Security: To protect rights, users, or the public from harm or illegal activity
Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication requirements
  • Monitoring for suspicious activity

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

  • Account Data: Retained while your account is active
  • Content: Retained according to expiration settings you choose, or until deleted
  • Analytics Data: Aggregated data may be retained indefinitely for service improvement
  • Logs: Technical logs are typically retained for 30-90 days
Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request transfer of your data to another service
  • Objection: Object to certain processing of your personal information

To exercise these rights, please contact us through the information provided below.

Cookies and Tracking

This site uses a few essential cookies that are required for it to work properly:

  • Authentication: To keep you logged in
  • Theme preferences: To remember if you chose dark/light mode
  • Site functionality: Basic stuff needed for the site to work

All of these are essential - the site won't work properly without them. If you disable cookies entirely, you won't be able to log in or have your preferences saved.

Third-Party Services

Our service integrates with the following third-party providers:

  • Discord: For user authentication and account creation
  • Supabase: For database and authentication infrastructure

These services have their own privacy policies that govern how they handle your information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

For privacy-related questions or data requests, see the contact page.