Last updated: May 13, 2026
PasteCollage ("we", "us", or "our") operates the website pastecollage.com. This page explains what information we collect, how we use it, and your rights regarding that information.
Account data. When you sign in with Google, we collect your name, email address, and profile picture via Google OAuth. This data is stored in our authentication system powered by Supabase.
Collage data. If you save collages, the canvas data (object positions, image URLs) and thumbnail images are stored on our servers via Supabase.
Local storage. We use browser localStorage to auto-save your canvas state between sessions.
Images on the canvas. Most image editing happens locally in your browser. Images you paste, upload, or drag onto the canvas are not sent to our servers except when you use a feature that requires server-side processing — see "AI features" below. If you save a collage, the collage metadata (image URLs, object positions, and canvas settings) is stored server-side.
AI features. When you use background removal or AI image generation, the input (your selected image for background removal, or your text prompt for AI generation) is sent to Replicate, our AI processing partner, via our Cloudflare Worker proxy. The generated output (a transparent image or generated picture) is returned to your browser. We do not retain the input or output server-side. To enforce daily free-tier limits and detect abuse, we record the timestamp and a 200-character preview of each AI generation prompt against your account.
Usage data. We use Google Analytics to understand how visitors use the site. This may include your approximate location (country/city), browser type, device type, pages visited, and session duration. This data is aggregated and not linked to your identity.
Product telemetry. We use AuraLog to record first-party events about how features are used (e.g. when a paywall is shown, when a checkout starts, when a background-removal call succeeds or fails). These events are tied to your account ID once you are signed in, and to a first-touch attribution record — see "Visit attribution" below — so we can understand the product funnel.
Visit attribution. To understand which marketing channels bring visitors to PasteCollage, on your first visit we record the URL query parameters (UTM tags), the referring site (with any query string stripped), the path you landed on, and your browser's interface language. This information is stored in your browser's localStorage under the key __pc_first_touch_source and attached to the product-telemetry events we send to AuraLog so we can group conversions by acquisition channel. It is captured once on first visit and not updated on subsequent visits. You can clear it at any time by clearing your browser's site data, or by signing out (which clears it automatically).
Advertising. We use Google AdSense to display advertisements. Google and its partners may use cookies and similar technologies to show you ads based on your interests and browsing history across other websites.
We use the following types of cookies:
__pc_first_touch_source localStorage key recording your first-visit referrer, UTM parameters, landing path, and browser locale. Used by AuraLog to attribute visits to marketing channels. We rely on legitimate interest under GDPR Article 6(1)(f) for this first-party analytics use; the data is not shared with advertisers and is not used for cross-site tracking.If you visit from the EEA, UK, Switzerland, or Brazil you are asked to accept or reject non-essential cookies (Google Analytics) before they are loaded. Visitors from other jurisdictions have Google Analytics loaded by default. You can change your choice at any time — Cookie Preferences.
California residents (CCPA/CPRA). Our use of Google Analytics and Google AdSense (described in §4 below) involves sharing usage data with Google for measurement and personalized advertising. Under California law this sharing may be considered a "sale" or "share" of personal information. You can opt out of personalized ads at adssettings.google.com and install the Google Analytics opt-out browser add-on to prevent collection by Google Analytics across all sites.
We rely on the following third-party services, each with their own privacy policies:
You can opt out of Google's personalised advertising at google.com/settings/ads or via the YourAdChoices opt-out tool.
If you are in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or equivalent laws, including:
Because we collect minimal data and rely primarily on Google's infrastructure, most of these rights are best exercised directly with Google via their privacy controls.
Analytics data is retained by Google for the period configured in our Google Analytics account (typically 26 months). Account and collage data is retained as long as your account exists. You can delete individual collages from the dashboard. Contact us to delete your account entirely.
When you share a collage, anyone with the share link can view the collage content (images, layout). No personal information about you is visible to viewers other than what is contained in the collage itself.
PasteCollage is not directed at children under 13. We do not knowingly collect personal data from children.
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of PasteCollage after changes are posted constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, you can reach us at: [email protected]