Privacy Policy

How r3rr.com handles your data

Overview

r3rr.com is designed with privacy in mind. We do not require accounts, we do not collect personal information beyond what is technically necessary to operate the service, and we never sell data to third parties. This policy explains what limited data we do collect and why.

Data We Collect

Data	How it's stored	Purpose
IP address	HMAC-SHA256 hash only — raw IP is never stored	Rate limiting, abuse prevention
User-Agent string	Stored as-is in audit log	Abuse investigation, DMCA compliance
Content you submit	Stored in encrypted PostgreSQL database	To provide the service (URLs, pastes, images)
Admin session	HttpOnly, Secure cookie scoped to /admin	Admin authentication only

Data Retention

Content (URLs, pastes, images) is deleted automatically when it expires. The default expiry is 30 days; you may set a shorter period or choose never-expire at creation time. Audit log entries are retained for operational and legal compliance purposes and may be kept for up to 12 months. IP address hashes are irreversible — the original IP cannot be recovered from the stored hash.

Cookies

r3rr.com sets no tracking cookies. A single session cookie named r3rr_admin is used exclusively for the admin panel and is scoped to the /admin path. It is never set for regular visitors.

Third Parties

We do not share data with third parties, advertisers, or analytics services. All assets (CSS, fonts, JavaScript) are served locally from our own infrastructure — no external requests are made by your browser when visiting this site.

Children

r3rr.com is not directed at children under the age of 13. We do not knowingly collect any information from children. If you believe a child has submitted content to our service, please contact us at dmca@r3rr.com.

Changes to This Policy

We may update this policy from time to time. Continued use of r3rr.com after changes are published constitutes your acceptance of the updated policy.

Last updated: 21 May 2026 · DMCA Policy · Terms of Service