Privacy Policy

Last updated: 25 October 2026

This policy covers the ClipAudit application ("the App") and the clipaudit.app website ("the Site"), both operated by the ClipAudit team ("we").

The App collects nothing

The clipboard record stays on your Mac:

• On launch the App applies a kernel sandbox profile to its own process that denies every socket. Settings → Privacy has a connection test.
• Its data is two plain-text files in ~/Library/Application Support/ClipAudit/, which you can open and delete.
• The content of anything it classifies as a secret is never stored, only a hash, the kind of secret, and its length.
• The App has no analytics, crash reporting, update check or account.

What the Site collects

• Purchases. Checkout is handled by Polar Software Inc. ("Polar"), our merchant of record. Polar collects your email address, payment details and billing country to process the order, issue the receipt, handle tax and provide the customer portal. We receive your email address, the license key and order details. We do not receive card numbers. Polar's privacy policy applies to the checkout: polar.sh/legal/privacy.
• Activation. When you activate a device on this Site you submit your license key and a device code. The device code is a short hash the App derives from your Mac's hardware identifier; it does not identify you or your Mac to us beyond telling two devices apart. We send the key and the device code to Polar to count the activation, and we store the device code against the license so that you can see and remove your devices.
• Contact. If you write to us, we keep the email thread for as long as needed to help you.
• Hosting. The Site is served by Cloudflare, which processes IP addresses and request logs to deliver the pages and to defend against abuse. We do not run any analytics script on the Site.

What we never do

• Sell, rent or share personal data with anyone other than the service providers named above, each of which only processes data on our behalf.
• Track you across other sites.
• Send marketing email you did not ask for.

Retention, transfers and your rights

The ClipAudit team is the data controller for the Site. Order and activation records are kept for as long as your license is valid and for the period tax law requires afterwards (currently up to 10 years for invoices). Support email is kept for two years. Polar and Cloudflare process data in the United States and the EU under their standard contractual clauses. The legal basis for all of this is the contract with you (the purchase) and our legitimate interest in running the Site securely.

You can ask us to show, correct or delete the data we hold about you by writing to the address on the contact page. If you are in the EU, UK or another jurisdiction with data-protection law, the rights that law grants you apply in full.

Children

The Site and the App are not directed at children under 16, and we do not knowingly collect data from them.

Changes

If this policy changes, the new version will be published here with a new date. Material changes to how activation data is handled will also be noted in the changelog.

Contact

Email privacy@clipaudit.app or use the contact page.