Privacy Policy

Last updated: December 9, 2025

1. Introduction

DELETO ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our secure credential sharing service at dele.to.

2. Information We Collect

2.1 Authentication Data

When you sign in, we use third-party authentication providers. We collect only the minimum information necessary for authentication:

  • Google Login: Email address and profile name (used solely for authentication)
  • GitHub Login: Email address and username (used solely for authentication)
  • Clerk: Our authentication provider that securely manages your login sessions. Clerk stores your authentication credentials and session data.

2.2 Email Notifications (Premium Feature)

Resend: When you enable premium email features (share link delivery or access notifications), we use Resend as our email service provider. The following data is processed:

  • Email Delivery: Recipient email addresses you provide for share link delivery
  • Access Notifications: Your email address (from your account) to notify you when shares are accessed
  • Share Metadata: Share title, view counts, and timestamps (never the encrypted content)

Important: Resend processes emails on our behalf and may have access to notification email content (share titles, view counts, timestamps). For maximum privacy with sensitive content, we recommend using the "Burn After Reading" (1 view) option, which automatically deletes your share after it's viewed once. Email content are stored by Resend for delivery purposes. See Resend's Privacy Policy.

2.3 Payment Information

Stripe: For premium subscriptions, payment processing is handled entirely by Stripe. We do not store your credit card details. Stripe may collect billing information as described in their Privacy Policy.

2.4 Analytics Data

DataBuddy: We use DataBuddy for anonymous analytics to improve our service. This includes:

  • Page views and navigation patterns
  • Browser type and device information
  • General geographic location (country/region level)
  • Performance metrics (page load times)

DataBuddy does not track personal information or link analytics data to individual users.

3. How We Use Your Information

  • To authenticate and identify you when you sign in
  • To process premium subscription payments
  • To send secure links to recipients (premium feature)
  • To send access notification emails when your shares are viewed (premium feature, opt-in)
  • To improve our service through anonymous analytics

4. Data Security

Your shared secrets are encrypted client-side using AES-256 encryption before being transmitted. We never have access to your unencrypted data. Encryption keys are generated in your browser and included only in the shareable link.

5. Data Retention

  • Shared secrets are automatically deleted after viewing or expiration
  • Account data is retained while your account is active
  • Analytics data is aggregated and anonymized

6. Third-Party Services

We integrate with the following services:

7. Your Rights

You have the right to:

  • Access your personal data
  • Request deletion of your account
  • Opt out of analytics tracking

8. Contact Us

For privacy-related inquiries, please contact us at privacy@dele.to