Privacy

Clipboard history stays on this Mac, apart from Reaction images you choose to send for AI tags (below). There is no account and no telemetry. This site loads no analytics, ads, or third-party scripts.

What is stored

Every copy that is not skipped: text, rich text, code, links, images, short GIFs and movies, files (path and icon), colors, and detected secrets. Each item records the source app, a timestamp, and a content hash used to dedupe.

The database is SQLCipher. Image and file blobs are AES-GCM. The 256-bit key is kept in your Mac's Keychain, never next to your history, so a Time Machine backup alone can't be read. By default a copy is kept in iCloud Keychain, end-to-end encrypted, so a new Mac restored from that backup can open your history. You can turn the copy off in Settings › Privacy, which also shows a recovery key to keep in your password manager. The history itself never syncs.

What is never stored

• Items marked Concealed, Transient, or AutoGenerated (1Password, Bitwarden, Apple Passwords, and the nspasteboard.org markers).
• Copies from apps on your ignore list. Passwords and Keychain Access are ignored by default.
• Copies made while Pause is on (⇧⌘P).

Detected secrets (API keys, JWTs, 2FA patterns) are stored encrypted and shown veiled. Their body is not searchable. Hold ⌥ to reveal.

What leaves the Mac

These are the only network calls. From your clipboard, link previews visit the links you copy, and AI tags, if you set them up, send Reaction images. Nothing else from it goes out.

• Software update checks.

• Activating a license.

• License checks. Each sends the order id and a name¹ for this Mac. Nothing else.

• Link preview fetches. You can turn this off.

• AI tags for Reactions, only if you add your own xAI, Anthropic, or OpenAI API key. Each Reaction's image then goes to that provider once to be tagged.

  ¹The name for your Mac is neither the name you gave it nor its serial number. It is a one-way hash of a hardware identifier mixed with your order number, so it comes out different for every purchase and cannot be tied to you, to another order, or to anything else you own. Stored beside it is the name you gave the computer, for one reason: so that when you go to free a place, you can tell your own Macs apart. You can see all three and release any of them from the license page, and releasing one removes it.

Buying goes through Stripe in your browser, not the app. Stripe is the merchant of record: it takes the payment, handles the tax, and sends the receipt. We never see your card details.

Sync is not in this version. If it ships, it will be opt-in, and masked items will not sync.

This website

Static files. No cookies, no trackers, no font or analytics hosts. Fonts and images are served from this origin. The trial DMG downloads from our file storage on Vercel Blob.

The lost-key form on the FAQ sends the email address you type, to our licensing server, which looks up that address's purchases in Stripe and emails any keys.