Privacy Policy
1. Who We Are
CopyPasta is developed and operated by Maksimov Anatolii, registered as autónomo in Spain (hereinafter "we", "us", or "our"). For any privacy-related inquiries, you can reach us at:
Email: legal@copypasta.pro
2. What This Policy Covers
This Privacy Policy explains what data CopyPasta collects, why, how it is processed, and your rights regarding that data. It applies to the CopyPasta macOS application and the temporary web-based sharing feature accessible via browser.
3. Our Core Privacy Principle
CopyPasta is a local-first application. Your clipboard content is stored exclusively on your device, encrypted, and never transmitted to our servers. We do not have access to, and cannot read, your clipboard history.
4. Data We Collect
4.1 Data We Never Collect
We never collect, access, store, or process your clipboard content. This includes text, images, files, passwords, API keys, credit card numbers, or any other data you copy. This content never leaves your device except when you explicitly initiate a sharing session (see Section 5).
4.2 Analytics Data (Collected by Default)
We use TelemetryDeck, a privacy-friendly analytics provider based in the European Union (Frankfurt, Germany), to collect minimal, anonymized usage data. TelemetryDeck does not store IP addresses and does not use device fingerprinting. By default, we collect: application crash reports, application launch events, and subscription purchase events. This data is anonymous and cannot be linked to you personally.
4.3 Extended Analytics (Opt-In Only)
You may optionally allow us to collect additional aggregated usage data to help improve CopyPasta. This includes information such as the type of content category copied (e.g., "a link was copied" — never the actual link), feature usage signals (e.g., "an item was pinned"), and similar aggregated interaction data. This extended data collection is disabled by default. You can enable or disable it at any time in the application settings. Even when enabled, this data is anonymized, aggregated, and processed through TelemetryDeck. We never receive your actual clipboard content through this mechanism.
4.4 Subscription & Purchase Data
Subscriptions and purchases are processed entirely by Apple through the App Store. We do not collect or store your payment information, Apple ID, or billing details. Apple may share with us anonymized transaction data (such as subscription status) necessary to unlock features in the app. Apple's handling of your purchase data is governed by Apple's own Privacy Policy.
5. Secure Sharing Feature
CopyPasta includes an optional feature that lets you share clipboard items via a temporary, encrypted link accessible in a browser. Here is how it works technically:
When you initiate a sharing session, your device generates a unique encryption key locally. An encrypted connection is established between your device and our relay server, hosted by Webdock in Denmark (EU). The server acts solely as a real-time relay — it transmits encrypted data between your device and the browser session. The encryption key is never sent to or stored on our server. The browser recipient must enter the key (shared by you out-of-band) to decrypt the content. When the CopyPasta app goes offline, closes, or you end the sharing session, the web page immediately becomes inaccessible. No content is stored on the server at any point.
The shared tab is accessible only via a UUID-based address and requires the encryption key for access. Without both, the content cannot be viewed.
6. Where Your Data Is Processed
- Clipboard content: exclusively on your device. Never transmitted externally.
- Analytics data: processed by TelemetryDeck on servers located in Frankfurt, Germany (EU).
- Sharing relay: our relay server is hosted by Webdock in Denmark (EU).
- Purchase data: processed by Apple, Inc. (United States), subject to EU-US Data Privacy Framework commitments.
All server-side processing occurs within the European Union. No data is transferred outside the EU by us, with the exception of Apple's processing of purchase transactions.
7. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process data on the following legal bases:
- Default analytics (crash reports, app launches, purchases) are processed under our legitimate interest in maintaining and improving the application (Article 6(1)(f) GDPR).
- Extended analytics are processed based on your explicit consent, which you may grant or withdraw at any time (Article 6(1)(a) GDPR).
- The sharing relay operates based on your explicit action to initiate a sharing session, constituting performance of a contract (Article 6(1)(b) GDPR).
8. Data Retention
- Clipboard history: retained on your device according to the retention period you configure in the app (from 1 day to indefinitely). You have full control.
- Analytics data: retained by TelemetryDeck in accordance with their data retention policy, typically aggregated and not linked to individual users.
- Sharing sessions: no data is retained. When the session ends, all transmitted data ceases to exist on the relay server.
9. Your Rights
Depending on your jurisdiction, you have the following rights regarding your data:
Under GDPR (EU/EEA residents)
You have the right to access any personal data we hold about you, to request rectification of inaccurate data, to request erasure of your data, to restrict or object to processing, to data portability, and to withdraw consent for extended analytics at any time. Because we collect minimal, anonymized data, most of these rights are already satisfied by design. To exercise any right, contact us at legal@copypasta.pro.
Under CCPA/CPRA (California residents)
You have the right to know what personal information is collected, to request deletion, and to opt out of the sale or sharing of personal information. We do not sell or share your personal information as defined under the CCPA/CPRA.
Under LGPD (Brazilian residents)
You have similar rights to access, correct, anonymize, block, or delete unnecessary or excessive personal data.
For all jurisdictions: because CopyPasta is designed to minimize data collection, in most cases there is little to no personal data associated with your use of the app. If you contact us with a request, we will respond within 30 days.
10. Children's Privacy
CopyPasta is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has somehow provided us with personal data, please contact us at legal@copypasta.pro and we will take steps to delete such information.
11. Third-Party Services
CopyPasta uses only the following third-party services:
- TelemetryDeck (analytics): a privacy-first analytics provider incorporated in the EU. TelemetryDeck does not collect IP addresses, does not use cookies, does not employ device fingerprinting, and is designed to comply with GDPR without requiring user consent for basic analytics. More information is available at https://telemetrydeck.com/privacy.
- Apple App Store (subscriptions): all payment processing is handled by Apple. We do not receive or store your payment details.
- Webdock (hosting): our relay server is hosted by Webdock in Denmark. Webdock does not have access to the encrypted data transiting through our server.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the application or on our website at https://copypasta.pro. The "Effective Date" at the top of this document indicates when it was last revised. Continued use of CopyPasta after changes constitutes acceptance of the updated policy.
13. Contact
If you have questions, concerns, or requests related to this Privacy Policy or your data, contact us at:
Maksimov Anatolii
Autónomo, Spain
Email: legal@copypasta.pro
Website: https://copypasta.pro