What we hold, and what we cannot.
Privacy policy · Last updated 26 September 2026
In short
We hold the minimum needed to move a clip from one of your devices to another. If you set a passphrase, the clip is encrypted before it reaches us and we cannot read it. Nothing is sold, and there is no advertising or analytics SDK in the app or on this site. The app reports crashes, with clip content stripped out.
What we collect
An account is created anonymously the first time you open the app, identified by a random ID and nothing else. You only give us an email address if you choose to upgrade the account, or sign in with Google or Apple — in which case we receive the address on that account. With Apple you can choose Hide My Email, and we only ever see the relay address Apple gives us.
For each clip you send we store its content, the type of device that sent it, that device’s name, and the time. Where encryption is on, the content field holds ciphertext. We also store one push notification token per mobile device, which is what lets a clip reach your phone.
Files and images you send are stored as files, with the clip pointing at them. With a passphrase set they are encrypted on your device before upload, so what we store is ciphertext.
Two optional integrations send clips somewhere you choose, and are off until you set them up. A webhook posts each clip you send or receive — its text, the device type, which direction it went, and the time — from your device straight to the URL you enter. It does not pass through us, and it carries the decrypted text even when encryption is on, so the service at that URL handles it under its own terms. The Obsidian integration writes clips into a folder of your vault on your computer, and nothing leaves the machine.
This website sets no cookies and runs no analytics. If you ask to hear when a platform ships, we store the email address you typed, the platform it was for, and which page you submitted from. Fonts are served by Google Fonts, which means your browser requests them from Google and Google sees your IP address in the process.
What we never see
Your passphrase
Never transmitted, never backed up. Moving it to a new device happens directly between your devices by QR code.
Encrypted clip contents
With a passphrase set, plaintext never leaves your device in either direction.
Anything unsent
Nothing reaches us until it is sent. The desktop app only reads your clipboard on its own if you turn on auto‑send, which is off by default — then it notices each new copy and sends it to the devices you picked. Phones never read the clipboard in the background; you paste, then send.
The caveat
Without a passphrase, encryption is off and clip content is stored in plain text on our infrastructure. Row‑level security still restricts it to your account, but we could technically read it.
Who processes it
Supabase
Hosts the database, your account, and the realtime connection that delivers clips.
Firebase Cloud Messaging
Delivers push notifications to Android and iOS. Receives the notification payload and your device token.
Cloudflare
Serves this website, and stores the files and images you send (Cloudflare R2). With a passphrase set, those are ciphertext by the time they arrive.
Sentry
Receives crash and error reports from the app when something goes wrong: what failed, where in the code, and the device model, operating system and app version. The app never attaches clips, screenshots, your IP address or anything that identifies you, and before a report leaves the device its error text is cut to one line with quoted values and link parameters removed. Nothing is sent while the app is working normally.
How long we keep it
Clips stay until you delete them or delete your account. Deleting a clip removes the row at once and queues any file it points at for removal from storage, which happens within minutes; there is no archive copy. Deleting your account removes the account and every clip attached to it. Backups taken before a deletion roll off on their own schedule and are not queryable by us in the ordinary course.
Your rights
You can delete your account and everything in it yourself, in the app: Settings → Delete Account on a phone, or Settings → Account → Delete Account on Windows and macOS — see how account deletion works. You can also ask for a copy of what is stored against your account, ask us to correct it, or ask us to delete it — email us from the address on the account. Note the obvious limit: for encrypted clips an export gives you ciphertext, because that is genuinely all we hold.