Privacy Policy

Last updated: November 16, 2025

UnlockBin ('we', 'us', 'our') operates an online paste-hosting platform where users can create and share text-based content. Some pastes may be locked behind a Stripe paywall. This Privacy Policy explains how we collect, use, disclose, and retain personal data and describes the rights available to residents of the European Economic Area (GDPR).

1. Information we collect

1.1 Information you provide

• Account & authentication data (email; sign-in via Firebase Authentication: Google, GitHub, or email/password).
• Paste content you upload and share.
• When relevant to unlocking services: IMEI, device model, and email.

1.2 Information collected automatically

• Technical data (IP address, device/browser details, page views) collected by Google Analytics and Firebase.
• Session and authentication cookies required for login and site functionality.
• Payment-related metadata processed by Stripe (we do not store full card details) and limited records relating to refund requests handled under our Refund Policy.

2. How we use your data

• To provide and operate the service (create, host and display pastes).
• To process payments and grant paid access to pastes via Stripe.
• To review and process eligible refund requests in line with our Refund Policy.
• To authenticate users and allow account recovery via Firebase.
• For support, warranty and administrative recordkeeping (including retention of IMEI data when applicable).
• To improve reliability, detect abuse and secure the service (legitimate interests).

3. Legal bases for processing (GDPR)

• Performance of a contract: Processing necessary to provide paid access to pastes and authentication.
• Legitimate interests: Service improvements, fraud prevention, security and basic analytics.
• Consent: For optional analytics or marketing cookies where consent is requested and recorded (if any).

4. Data sharing & third parties

We share personal data only with the following categories of service providers:

• Stripe - payment processing.
• Firebase (Google) - authentication, storage and hosting.
• Google Analytics - usage analytics.

These providers may process data outside the European Economic Area. We rely on appropriate safeguards (e.g. standard contractual clauses or the provider's privacy measures) provided by those processors.

5. Data retention

• Pastes remain online until the creator deletes them.
• Administrative data including IMEI (when applicable) is retained for 1-2 years for support, warranty and bookkeeping.
• Account data is kept until deletion request or account termination.
• Payment records are retained according to Stripe's policies and for financial reporting obligations.

6. Cookies

We use:

• Technical cookies required to keep you logged in and maintain sessions.
• Google Analytics cookies for usage statistics.

You can disable cookies via your browser; however disabling essential cookies may break login and site functions.

7. Your rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

• Access - request a copy of the personal data we hold about you.
• Rectification - request correction of inaccurate data.
• Erasure (right to be forgotten) - request deletion of your personal data where applicable.
• Restriction - request limitation of processing in certain circumstances.
• Portability - receive your data in a structured, machine-readable format.
• Objection - object to processing based on legitimate interests or direct marketing.
• Withdraw consent - where processing is based on consent, you may withdraw it (this does not affect processing already performed).
• Lodge a complaint - you may lodge a complaint with your local data protection authority (in the Netherlands: Autoriteit Persoonsgegevens).

How to exercise your rights: Email hello@unlockbin.com. We will respond within a reasonable timeframe and in accordance with applicable law.

8. Data deletion process

To request deletion of account data or a paste, contact hello@unlockbin.com. We will verify the request and process it. Pastes you delete will be removed from public view; backups may persist for a limited time as described in Data retention.

9. Security

We implement administrative and technical measures to protect personal data (TLS, authentication via Firebase, limited access). However no online system is completely secure. We cannot guarantee absolute security.

10. Minors

The service is not intended for users under 16. We do not knowingly collect personal data from children under 16.

11. International transfers

Third-party providers (Stripe, Firebase, Google) may transfer or process data outside the EEA. Where applicable, we rely on the provider's safeguards (standard contractual clauses, adequacy decisions, or similar). For specific details see the providers' privacy policies.

12. Changes to this policy

We may update this policy from time to time. We will post the revised policy on this page with a new Last updated date. Continued use of UnlockBin after changes indicates acceptance of the updated policy.