Privacy Policy
Effective September 5, 2026
fmrl.site is operated by Too Great LLC, a Pennsylvania limited liability company.
What we collect
The content you paste, so we can show it to whoever has the link. Alongside it we store its sha256 hash, its size, its title, and a 300-character excerpt of its visible text, together with a phishing score and the signals behind it. That scan record is kept 90 days.
A private page has no title and no excerpt, and nothing of its content is recorded: its record includes the encrypted envelope's hash, size and format, the page's id, the submitter's network prefix, how it was submitted, the denylist verdict, and timestamps. A page published through the API also records the key's 9-character display prefix.
Your network prefix — the first 24 bits of an IPv4 address or the first 64 of an IPv6 one, never the full address — so we can rate limit.
A verification cookie that lasts 24 hours, set after you pass a Cloudflare Turnstile check, so you are not challenged again on every share.
We run no analytics and no ads on fmrl.site. There is no tracking pixel, no advertising script, and no profile of you anywhere in this product.
Who else sees it
Cloudflare fronts the site, so every request passes through it and it sees the usual connection data.
Stripe and its Link service handle payments. They see your email address and your payment details; we keep a session id, a payment id, the rail, the amount and currency, and whether it was refunded — never your card or wallet details.
After a purchase we send one email to the address you gave Stripe, carrying the link that lets you remove the page. We do not keep the address.
Pinata stores kept pages on IPFS. IPFS is a public network and a pinned page is public and permanent.
Google Safe Browsing receives the URLs we find inside pasted content, so we can check them against its lists.
Our classifier provider may receive the visible text of a page whose heuristic score lands in the borderline range, and nothing else.
We do not sell your data, and we do not share it with anyone not listed here.
How long we keep it
A shared page and its bytes are deleted 7 days after you share them, unless the page is kept, in which case they stay while it is pinned. Scan records expire after 90 days. Payment records are kept as long as our accounting and tax obligations require.
Cookies
One cookie: fmrl_verified, the 24-hour verification cookie described above. It is signed, it carries no identity, and it works only from the network you passed the check on. There are no other cookies.
Your browser also remembers, in its own local storage, the manage key of each page you shared, so the viewer can show you a Remove button. That key stays in your browser and is never sent to us except when you use it to remove a page.
Do Not Track
We do not respond to Do Not Track signals, because we do not track you in the first place.
Your choices
The surest control is the obvious one: do not paste anything you would not want on the public internet. To have a page you shared removed, write to support@fmrl.site with its link. A page that has been pinned to IPFS can be unpinned by us, but copies already on the network are beyond our reach.
Children
fmrl.site is not directed to anyone under 18 and we do not knowingly collect information from children.
Changes
We may update this policy. The effective date above changes when we do.
Contact
support@fmrl.site