Pasteboard
Text → short /p… link. Tick encrypt for AES-GCM in the tab (we store ciphertext only) or leave it off for plain text on disk.
New paste
Anonymous pastes are removed after about 30 days. Logged-in pastes stay until you delete them or your account is removed after 6 months without login. Donors pick the colour theme; optional paste name, background effects, compact view, and syntax highlighting apply to all.
Encrypted vs plain
Encrypted: AES-256-GCM, PBKDF2-SHA-256 (100k). We keep salt/IV/ciphertext. Write-up: ve.ms/p9e.
Plain: text stored as-is. Anyone with the link reads it.
Threat model (short)
If your machine or TLS middlebox is owned, all bets are off. Encrypting first still beats sending naked secrets for casual hosting leaks.
URLs
/p + slug (same charset as short links), e.g. /pab, /pxy7k.