Privacy and Security
SnipShare gives members several ways to control who can see a paste and for how long. These options are set per paste on the create/edit screen and are enforced everywhere the paste is served (single view, raw output, download, shortcode, and oEmbed).
Visibility
Section titled “Visibility”| Visibility | Who can view | On the public index |
|---|---|---|
| Public | Everyone, including guests | Listed |
| Unlisted | Anyone with the direct link | Not listed |
| Private | Only the paste owner (must be logged in) | Not listed |
Private pastes are never exposed through the shortcode or oEmbed to anyone but the owner.
Password protection
Section titled “Password protection”When Password Protection is enabled (a per-paste option, controlled site-wide by the Password Protection feature toggle), the paste owner can set a password. Visitors must enter the password before the content is shown. Until unlocked in the current session:
- The single paste view prompts for the password.
- Raw output and downloads return “This paste is password protected.”
- The
[snipshare]shortcode shows a locked placeholder with a link to the paste page.
Burn after reading
Section titled “Burn after reading”Burn after reading destroys a paste the first time it is viewed by anyone other than the owner. The owner can keep viewing their own paste without triggering the burn. This option is only available when creating a paste, not when editing.
After it is burned, the paste’s status becomes expired and it is no longer served.
Expiration
Section titled “Expiration”When Paste Expiration is enabled, a paste can be set to expire automatically. Available intervals on the create screen:
| Option | Duration |
|---|---|
| Never | No expiry |
| 10 Minutes | 10 minutes |
| 1 Hour | 1 hour |
| 1 Day | 1 day |
| 1 Week | 1 week |
| 1 Month | 30 days |
| 3 Months | 90 days |
| 6 Months | 180 days |
| 1 Year | 365 days |
An hourly background task (WP-Cron) marks overdue pastes as expired. The same task permanently deletes pastes that have been in the trash for more than 30 days.
Access rules at a glance
Section titled “Access rules at a glance”Every way of reading a paste runs the same checks in order: paste must be active, the viewer must be allowed to see its visibility level, any password must be unlocked, and burn-after-read is applied on qualifying views.