Security

No network, enforced by the kernel

At launch the App calls sandbox_init on its own process with a Seatbelt profile that denies every socket ((deny network*)). Every connect() then returns EPERM. Settings → Privacy runs a connection attempt on demand and shows the result. The one exemption is Apple's /usr/bin/log, which cannot run inside a sandbox and is exec'd by literal path to stream the pasteboard daemon's log into the App's pipe.

Secrets are never stored

When a copy is classified as a secret, the App rewrites it with the nspasteboard.org Concealed marker and keeps only a hash, the kind and the length.

Source included

Every purchase includes the complete Swift source under the MIT License. The prebuilt App is built from that source, signed with our Apple Developer ID and notarized by Apple.

Permissions

• None for the clipboard log and secret concealment.
• Input Monitoring, optional, for ⌘C/⌘V attribution.
• Notifications, optional, for conceal alerts.

Activation

Activation happens on this website. The App shows a device code derived from a one-way hash of the hardware identifier; the website sends your key and that code to Polar and returns a license signed with Ed25519, which the App verifies with an embedded public key. The private key lives only in the activation service.

Reporting a vulnerability

Email security@clipaudit.app. We acknowledge within two business days and credit reporters in the changelog if they wish.