Updated November 3, 2026
Privacy policy
iClippy synchronizes an encrypted clipboard library. This page explains the data the current beta handles, including what encryption does and does not hide.
Who operates iClippy
For privacy questions, account requests, or support, contact the iClippy operator at ihab@ihabr.com. Do not send clipboard contents, passwords or recovery codes in a support message.
Clipboard contents and keys
Supported clients encrypt clipboard records with AES-256-GCM before upload. The sync service stores ciphertext. A separate account envelope protects the random library key. Apple and Android clients protect saved credentials with platform secure storage; the Windows prototype uses Windows data protection. A recovery code includes the library key and grants access to content. Keep it private.
Account and service metadata
Supabase handles account authentication and stores email addresses, account identifiers and encrypted account envelopes. Sync requires operational metadata including encrypted-record sizes, revisions, timestamps, library identifiers, account status, plan and quota. The service may also handle device names, platform information, last check-ins and push tokens when push is configured. Encryption of clipboard content does not hide this metadata.
Infrastructure and billing
Cloudflare serves the website and Supabase provides account and database services. These services receive the network information needed to process requests, such as IP addresses. Stripe handles web payments and payment details; iClippy uses billing identifiers and entitlement status to apply Pro access. Use your iClippy email at checkout so the subscription can be matched. App Store and Google Play subscriptions are not currently live.
Retention and deletion
On updated Mac and phone clients, eligible unpinned history expires after 30 days or is cleaned up when storage fills. Pins, Vault and Keep categories remain until you remove or change them. Explicit deletions propagate when other clients next sync; offline copies may remain until then. Encrypted deletion records and operational data can remain for synchronization. Backups you export are separate copies, and deleting a live clip does not delete it from an existing backup. Contact support for an account-deletion request; no instant erasure from every offline device or provider backup is promised.
Vault and sensitive content
Vault uses device authentication on supported clients and hides protected cards from normal history. Mac capture excludes common concealed or transient password-manager markers. Android Paste capture excludes clipboard items marked sensitive. These checks cannot detect every secret; pause capture before copying anything you do not want stored. Windows does not yet offer the same protections or Vault interface.
Backups and offline copies
Mac and phone clients keep local copies for use and retry after connection failures. Exported backups require the backup password. If you choose iCloud Drive or another cloud folder, that provider handles the exported file under its own policies. You control whether to export and where to save the file.
The website preview and measurement
Text you type or explicitly paste into the website demo stays in the current page. It is not uploaded by the demo, stored in browser storage, or sent with click events. The site currently has no connected advertising or behavioral analytics service. It can emit in-page events for download and upgrade clicks without clip text or email; aggregate reporting is not connected. Hosting providers may keep request logs. The homepage loads fonts from Google Fonts and animation code from Cloudflare’s public CDN, which receive normal resource requests.
Your choices
You can pause capture and sync, remove clips, choose category retention, export a password-protected backup, and sign out. Current clients do not provide remote revocation of every already-unlocked device. Protect your devices and recovery code. Email support to request account or metadata assistance.