Privacy Policy

Scope and contact

This policy explains the data handling implemented in Clipmere and this website, including evaluation builds supplied before the first release. The Clipmere team is the contact for privacy questions. Clipboard storage is local by default, but that does not mean the app never uses a network.

Clipboard data on your Mac

While capture is enabled, Clipmere stores supported clipboard content such as text, images, links and file references, with information such as the source app and time. History, attachments, thumbnails and local licence state are stored under ~/Library/Application Support/Clipmere/. These files are not a backup, and local storage does not mean every file is encrypted by Clipmere.

You can pause capture, exclude apps, delete history and choose a retention period. Current builds default to 30 days, with cleanup at launch and periodically while running; pinboard items are exempt from automatic history expiry. Some orphaned attachments are quarantined before later cleanup, so deletion is not a promise of immediate forensic erasure.

By default, Clipmere skips recognized concealed or transient clipboard markers. This depends on the source app marking content correctly and on your settings; ordinary copied passwords or other sensitive text may still be recorded.

Keychain and trial records

macOS Keychain stores the trial's first-run and last-seen timestamps and clock-rollback state, image-hosting credentials you enter, and a fallback device identifier if the hardware identifier is unavailable. These are Clipmere-specific items, not a request for other apps' passwords. Removing the app or its history does not automatically remove Keychain records.

Optional iCloud sync

iCloud sync is off by default and requires a build with the appropriate entitlement and a signed-in Apple Account. When enabled, the current implementation can synchronize clipboard items, including ordinary history, pinboards, text, file references, source-app metadata, timestamps and supported attachments. Do not enable it on the assumption that only items placed in pinboards leave the Mac.

This data goes to your private CloudKit database in iCloud.com.clipmere.mac, operated by Apple, rather than through the Clipmere licence server. Turning sync off stops future syncing; it does not erase existing cloud copies. Cloud deletion depends on a successful sync or the controls Apple provides. Apple's service terms and retention practices also apply.

Optional link previews

Link previews are off by default. Enabling them allows requests to copied URLs and resources used to build their previews. Destination sites can receive the URL, your IP address and ordinary request headers. These requests do not go through the Clipmere licence service. Turning previews off stops future preview generation; already saved previews may remain in local history.

Image hosting you configure

When you choose to upload an image or test a connection, Clipmere sends image data or a test object directly to the storage endpoint you configure, using the credentials required to authenticate the request. Connection settings and upload records are local; credentials are kept in Keychain. Your storage provider processes the request under its own terms.

A public image link may be accessible to anyone who has it, depending on your bucket permissions. Deleting local clipboard history does not delete an uploaded object. Use the remote-delete action or your provider's console and verify the result; caches and third-party copies may remain.

Licence service and security records

Activation sends your licence key, a stable identifier derived from the Mac's hardware UUID, and the Mac's name to the Clipmere licence service. Checks and deactivation send the key and device identifier. The identifier is hashed, but is still linkable to a device. Clipboard content is not part of these licence requests.

The service, hosted on Cloudflare Workers and D1, stores keys, seat limits, licence status, device bindings and timestamps, plus an email address if supplied when a key is issued. It records security events including action, result, time, licence key and a truncated IP-address hash. Cloudflare receives the original network request, including the IP address; hashing in our audit table does not make all infrastructure processing anonymous.

The app attempts checks daily and after wake. Offline use depends on the cached token's expiry and a limited grace period. Server licence and activation records do not currently have automatic expiry-based deletion. Cleanup of older audit and rate-limit records is triggered by administrative activity, so it is not a guaranteed deletion deadline. Contact us about access or deletion; security, legal or licence-integrity needs may limit what can be removed.

Checkout and payments

Starting a checkout sends Waffo Pancake the product, currency, your chosen site language, an internal order reference and a success link, plus an email address if you enter one. Waffo hosts the payment page and collects the payment and billing details you provide there; this site does not receive your card number.

After payment, Waffo sends the licence service the order reference, buyer email, amount, currency and status. The service stores an order record with the licence key, buyer email, amount, currency and the environment used, so the key can be shown through the success link and support can check a purchase later. That link carries a random claim token in the page fragment; anyone who has the link can read the key.

Waffo processes payment data as an independent provider under its own terms and privacy policy, so its retention and availability are outside Clipmere's control. When checkout runs in test mode, it uses test payment details and no money moves.

Update checks and diagnostics

Sparkle checks Clipmere's configured update feed. Automatic checks are enabled by default and can be turned off in Settings. The host receives normal request information such as IP address and client headers; optional Sparkle system profiling is disabled. Clipboard content is not included in update checks.

Clipmere keeps rotating diagnostic logs locally and offers a user-initiated diagnostic export. Reports can contain system and app versions, counts, local paths, storage configuration details and error messages. Review a report before sending it, because error text can contain contextual information. The app does not automatically upload these diagnostic reports or include advertising analytics.

Website and support

This website does not include advertising trackers, third-party analytics scripts or an account sign-in form. It stores your selected theme and language in browser local storage. Its hosting provider, Cloudflare, processes normal request data to deliver and protect the site; we do not promise that infrastructure keeps no logs.

Payment details are entered on Waffo's hosted checkout page, not on this website. If you email support, your address, message and any attachments are processed to respond. Do not send passwords, full licence keys or private clipboard content unless genuinely needed through an agreed secure channel.

Your choices and requests

You can control local capture, retention, previews, sync and image hosting in Settings. History export lets you keep a separate copy. Removing local history does not by itself erase Keychain records, server licence records, uploaded images or iCloud copies; each has separate controls.

Depending on applicable law, you may have rights to access, correct, delete or restrict processing of personal information. Contact the Clipmere team with your request. We may need to verify that it concerns your data, and will explain applicable limits. We cannot retrieve clipboard history that exists only on your Mac.

Policy updates

The date above identifies this policy version. Material changes to data handling will be described on this website. Review the policy before enabling newly introduced connected features.