Privacy Policy

• Your clipboard history lives on your device by default.
• The full content of each copied item (text, code, links, images) and its metadata are encrypted at rest on your device using a key sealed by your operating system's secure storage (macOS Keychain, Windows DPAPI, or Linux libsecret).
• Short item titles and previews stay unencrypted so you can search your history and see snippets in the shelf.
• Cross-device sync is optional. When enabled, items are encrypted on your device before upload to Firebase (Firestore / Cloud Storage).
• Pro cloud AI is off by default. When you turn it on, selected clip content may be sent to our cloud AI provider for the action you requested.
• We don't sell your data, and we don't show ads.

The app keeps a local database on your computer containing the items you copy, along with derived metadata such as the source application, device name, copy count, and timestamps. Full item content and metadata are encrypted at rest as described above.

You can export or delete your entire history at any time from the app's Settings → Data section, and you can set automatic retention limits (by days and item count) under Settings → General.

By default, Pasteable skips captures from known password managers (1Password, Bitwarden, LastPass, Dashlane, and similar). You can also add your own ignored applications, file types, and clipboard formats in Settings → Ignore Rules.

With “Blur sensitive content” on, likely-sensitive clips (passwords, API keys, and similar) are detected with on-device heuristics and visually hidden in the shelf until you reveal them. Flagged clips are still stored (encrypted at rest), never deleted, and excluded from team workspaces.

Because a clipboard manager sees whatever you copy, you are responsible for what enters your history. If you copy something sensitive from an app that isn't on the ignore list, it will be stored (encrypted at rest) until you delete it.

Routine capture, search, and sync do not send clipboard contents to Pasteable or a third-party model. Cloud AI is a separate, off-by-defaultPro feature you turn on in Settings.

When Pro cloud AI is enabled, selected text or images may be sent to our cloud provider (currently OpenAI-compatible) for the action you requested — summarize, translate, OCR, image captions, search-context enrichment, or the optional sensitive-content classifier that catches secrets the on-device heuristic missed. We use these requests only to return the result to your device; we do not use them for ads or model training.

Turn cloud AI off any time in Settings. With it off, no clip content leaves your device for AI processing.

Sync is off until you sign in and enable it. When on, your items, collections, and sync configuration are transmitted to Firebase so your other signed-in devices can see them. When sync is on, clip content, titles, previews, metadata, files, and images are encrypted on your device before upload. Firebase stores ciphertext and cannot decrypt it. Limited routing data such as item type, timestamps, device identifier, and a deduplication hash remains visible to operate sync.

The random account sync key is wrapped by a recovery-code-derived key. Email/password users may also add a password-derived wrapper for convenient web access; the password and unwrapped sync key are never sent to Pasteable. Google users unlock new browsers with a recovery code. An already-unlocked trusted device can issue a replacement recovery code without deleting or re-encrypting history.

You can turn sync off or sign out at any time. Turning sync off stops new uploads but does not automatically delete data already in your account; you can clear it from the app or by deleting your account.

When you create an account (email/password or Google sign-in), Firebase Authentication stores the credentials needed to identify you. We receive your email address and a stable user identifier. We do not receive or store your password — Firebase manages authentication.

Paid plans are processed by Stripe. Payment details (card number, etc.) are handled by Stripe and are not stored on our servers or in your account. We receive the email associated with the charge and your subscription status so we can provision your plan.

Pasteable writes a local crash log to your application data directory if the app hits an unexpected error, so problems can be diagnosed from your machine. Sending crash reports to us is opt-in and off by default. If you enable it, reports may include a sanitized error and stack, app/build/runtime version, operating system, a stable installation/device/session identifier, and up to 30 allowlisted feature-step breadcrumbs. If you are signed in, the report can be associated with your account so support can identify who was affected. Home paths, auth tokens, query text, copied filenames, and clipboard contents are removed before transmission. Crash-report consent is separate from product analytics and can be changed at any time.

We measure aggregate, anonymous product analytics to understand which features are used and where the onboarding funnel drops off. This includes page views, downloads, signups, checkout, and coarse in-app events such as app launch, overlay open, search, AI action, snippet insert, and sync state — each tagged with a category (e.g. text, image) rather than content.

We never send clipboard contents, file paths, or personal data with these events. Errors are recorded as a short code bucket, never a stack trace. On the web and in the desktop/mobile apps these events are sent to our first-party store and to Google Analytics 4, which may set cookies on the website. GA4 uses an anonymous client identifier, not your account ID.

Product analytics is on by default in the desktop and mobile apps. You can opt out at any time: on the website via the cookie/privacy banner or by setting pasteable_analytics_opt_out in your browser, and in the desktop app under Settings → Privacy → “Anonymous product analytics” or in the mobile app under Settings → “Anonymous analytics”. Opting out does not affect sync or any other feature. On pasteableapp.com, visitors in the United States and most other regions see analytics and ad measurement enabled by default until they opt out in the privacy banner. Visitors in the EU, UK, Switzerland, and Brazil must opt in before non-essential cookies run. Unknown locations are treated as opt-in required.

• We don't read your clipboard for ads, product analytics, or model training.
• We don't routinely scan clipboard contents — capture stays on your device unless you enable Pro cloud AI.
• We don't sell or rent your data to third parties.
• We don't use your clipboard data to train models.
• We don't show advertising.

Pasteable is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided us with personal information, contact us and we will delete it.

• Delete individual items or your entire history from the app.
• Export your history (Settings → Data).
• Disable Pro cloud AI, sync, or sign out at any time.
• Request full account deletion from the app.
• Adjust retention, ignore rules, blur, and capture settings at any time.

We may update this policy as the product evolves. Material changes will be reflected by the “last updated” date above. Continued use after a change means you accept the revised policy.