Privacy Policy
Last updated: July 13, 2026
Paste It! ("we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect, what we do not collect, and how we use data when you use our website, account services, and macOS application.
Summary
- Clipboard contents stay on your Mac. We do not upload, sync, or sell clipboard history.
- We collect account and billing-related data needed to run sign-in and subscriptions.
- Payments are processed by Dodo Payments (Merchant of Record). We do not store full card numbers.
1. Information we do not collect
The Paste It! Mac app is local-first:
- Clipboard history, pinboards, OCR text derived from images, and related files are stored on your device (Application Support).
- We do not upload clipboard contents to our servers.
- There is no cloud clipboard sync and no telemetry of clipboard content.
2. Information we collect
Account information
When you create an account, we may collect:
- Email address
- Password (stored as a secure hash — never in plain text)
- Name (if you provide it)
- Account identifiers and session tokens
Subscription and entitlement
To provide access to paid plans, we store:
- Current plan and entitlement status (e.g. trial, pro_monthly, lifetime)
- Trial start/end dates
- Subscription status mirrored from our payment provider
- Order references for one-time purchases
Website and authentication
When you use our website or sign in, we may collect:
- IP address and basic request logs (for security and abuse prevention)
- Browser type and device information in server logs
- Essential cookies for authenticated sessions on the website
We do not use third-party advertising or analytics cookies on the marketing site.
Cookies {#cookies}
We use a small number of strictly necessary cookies to operate the website and account flows:
| Cookie | Purpose | Duration |
|---|---|---|
paste_it_token | Keeps you signed in (httpOnly session) | Up to 14 days |
paste_send_code_id | Rate-limits verification-code requests per browser | Up to 1 year |
On login and sign-up pages, Cloudflare Turnstile may set cookies or use similar storage to detect abuse. Turnstile loads only on those pages when enabled.
Because these cookies are required for security and core functionality, they are not optional. We do not set non-essential marketing or analytics cookies at this time. If that changes, we will update this policy and ask for consent where required by law.
You can clear cookies at any time through your browser settings. Clearing session cookies will sign you out of the website.
Payment information
Checkout is handled by Dodo Payments as Merchant of Record. Dodo collects and processes payment details (such as card information and billing address) according to Dodo Payments' Privacy Policy.
We receive limited billing metadata from Dodo (e.g. customer ID, payment status, plan purchased) — not your full card number.
Support communications
If you contact us, we collect the information you choose to provide (such as your email and message content) to respond to your request.
3. How we use information
We use collected information to:
- Create and manage your account
- Authenticate you on the website and Mac app (including desktop handoff)
- Determine subscription entitlement and trial status
- Process billing events via Dodo Payments
- Send transactional emails (verification codes, receipts, account notices)
- Maintain security, prevent fraud, and enforce our Terms
- Improve the Service and fix issues
We do not sell your personal information.
4. Legal bases (EEA / UK)
Where GDPR or UK GDPR applies, we process personal data based on:
- Contract — to provide the Service you signed up for
- Legitimate interests — security, fraud prevention, and product improvement (balanced against your rights)
- Legal obligation — where required by law
- Consent — where we ask for it explicitly (e.g. optional marketing, if offered)
5. Data retention
We retain account and billing records for as long as your account is active and as needed to comply with legal, tax, and accounting obligations. Server logs are retained for a limited period for security purposes.
Local clipboard data on your Mac is controlled by you through app settings (retention limits, manual deletion, uninstall).
6. Sharing with service providers
We share data with trusted providers only as needed to operate the Service, including:
| Provider | Purpose |
|---|---|
| Dodo Payments | Payment processing, tax, receipts (Merchant of Record) |
| Email provider (e.g. Resend) | Transactional email delivery |
| Hosting / infrastructure | Running our API and website |
These providers process data under contractual obligations appropriate to their role.
7. International transfers
We may process data in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
8. Your rights
Depending on where you live, you may have rights to:
- Access, correct, or delete your personal data
- Object to or restrict certain processing
- Data portability
- Withdraw consent where processing is consent-based
- Lodge a complaint with a supervisory authority
To exercise these rights, contact privacy@paste-it.app. We may need to verify your identity before fulfilling a request.
9. California privacy notice (CCPA / CPRA)
California residents: we do not sell personal information. We collect the categories described in Section 2 for the business purposes in Section 3. You may request access, deletion, or correction as described in Section 8.
10. Children's privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we will delete it.
11. Security
We use administrative, technical, and organizational measures designed to protect personal data, including encrypted connections (HTTPS), hashed passwords, and access controls. No method of transmission or storage is 100% secure.
12. Changes
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated by email where appropriate.
13. Contact
Privacy questions or requests:
Related: Terms of Service · Refund Policy