Privacy Policy

I built tryclipbolt.com and ClipBolt to handle as little personal data as possible. This website has no analytics, advertising, or tracking cookies, and I do not sell your data. In ClipBolt, your history stays on your Mac unless you sign in to sync, and AI features and app analytics stay off unless you turn them on.

Fayez Nazzal, Qabatiya, Palestine, is the data controller for tryclipbolt.com and ClipBolt. I decide how and why personal data is used. You can contact me about privacy at [email protected].

tryclipbolt.com is a static site hosted on Cloudflare Pages. Cloudflare processes request data such as your IP address, browser details, and the requested page to deliver the site and protect it from abuse. Cloudflare may set a security cookie to tell browsers from bots.

The website has no analytics, advertising, tracking pixels, or marketing cookies. I do not use Google Analytics, PostHog, or any other visitor tracking on this site. The site sets no first-party tracking cookies, so no cookie banner is needed. I keep no mailing list, and the website has no signup form for one.

The BetaList badge is served from this site. BetaList receives data only if you click the link. External links do not receive the page you came from.

The contact form opens your email app with the subject and message filled in. This website does not receive or store your message. You must press Send in your email app to send it.

Your email goes to [email protected]. Your email provider and my email provider process the message. I use your name (if given), email address, subject, and message only to reply.

I delete emails 12 months after the last reply, unless they are needed for a legal claim. Email providers may keep backups under their own terms.

Please leave out passwords, API keys, and other secrets.

The app keeps your history on your Mac until you sign in. Signing in turns on sync. AI features and app analytics are separate choices, both off until you turn them on. This part of the policy explains each one.

ClipBolt watches the macOS clipboard while it runs and saves each new copy to your history automatically. The Integrate with system clipboard setting is on by default. Turn it off in Settings and ClipBolt stops recording new copies.

A history item can include text, images, files, other clipboard formats, and a preview. ClipBolt keeps history in a local SQLite database and stores image and file assets in its app data folder. The signed macOS build keeps that data inside ClipBolt's app container.

ClipBolt skips items that the source app marks as concealed, transient, or auto-generated. Many password managers mark copied passwords this way. ClipBolt does not detect passwords, API keys, or other secrets in ordinary copied text, so those are saved like any other item.

Source detection is off by default. Turn on Auto detect source app to record the app you copied from, and Auto detect source website to record a browser origin. Both settings apply per device.

Until you sign in, your history stays on your device. Signing in turns on sync for that account.

An account is optional. Sign-in uses a link sent to your email address. ClipBolt stores your email address, account ID, and account timestamps. The sign-in flow does not ask for a name or profile image.

Stored sessions do not include your IP address or browser type. ClipBolt keeps short-lived request counters to limit repeated sign-in attempts and abuse. Those counters expire automatically.

Sign-in links expire after 5 minutes. A signed-in session expires after 7 days without use. Signing out ends the session on that device.

When you are signed in, syncing runs automatically for that account. ClipBolt sends your history items, their text and native clipboard formats, tags, descriptions, extracted text, translations, collection membership, and the images and files they contain.

Item records are stored in ClipBolt's PostgreSQL database. Images and files are stored in an AWS S3 bucket that the server reads through signed links. Those links expire after 5 minutes. Signing out stops syncing on that device.

The server stores items under your account ID. Source app and website details sync only if you turned those per-device settings on.

Your Inbox and private collections are visible only to you. When you share a collection, the people, groups, or enterprise members you choose can open the items in it.

Enterprise owners and administrators manage membership, groups, and collection audiences. They manage shared work; your Inbox and private collections stay yours alone.

Enterprise AI and MCP controls are separate switches. Both start off. While either is off, ClipBolt's servers refuse that external processing for the enterprise. Your own AI consent still applies when the enterprise allows a feature.

Removing someone from a collection, group, or enterprise stops further syncing to their devices. Items they already copied, exported, or captured in a screenshot stay on their devices. Deleting your account deletes your account, personal items, memberships, tags, sessions, and stored files. Shared content owned by an enterprise stays with that enterprise.

AI features run on servers operated by OpenAI and TypeSafe, separate from your device. You need an account to use them, and they stay off until you allow them for that account. ClipBolt records which version of the AI notice you accepted and when. If the notice changes, ClipBolt asks you again. You can turn AI features off at any time in Settings. ClipBolt's servers then refuse every AI request for your account.

After you allow AI features, the following data is sent:

• Automatic tagging (on by default after you allow AI): after each new capture, OpenAI receives the item's readable text and signed links to its image previews to suggest tags. When local detection leaves the item type unresolved, TypeSafe receives up to 4,000 characters of the text to classify it. You can turn this off with Auto tag and classify with AI in Settings.
• Describe an image: OpenAI receives signed links to the image previews and any text in the item.
• Translate: OpenAI receives the text and the language you choose.
• Rephrase: OpenAI receives the text.
• Chat: OpenAI receives your question, plus the text and image preview links from the history items you select or that match your question.
• Read text in an image (OCR): OpenAI receives the image itself.

Image preview links are signed for 5 minutes. The provider uses the link to fetch the image. ClipBolt saves the results with your item: tags, item types, descriptions, extracted text, and translations.

OpenAI and TypeSafe handle API data under their own terms. ClipBolt does not control how long either provider keeps a copy. OpenAI publishes its API data controls at developers.openai.com. TypeSafe's terms govern the text it receives for classification.

Do not use AI features on content you are not allowed to share with these providers.

App analytics is off until you turn on "Share usage analytics linked to your account" in Settings. While it is on, ClipBolt sends PostHog, on its United States servers, the events the app records about how you use its features. When you are signed in, those events include your ClipBolt account ID. Automatic click capture and session recording are turned off. Turning analytics off stops the app from sending events.

Settings also has a switch for crash and error reports. This version of the app has no error-reporting service connected, so no crash or error reports are sent.

ClipBolt sends two kinds of email through Resend: the sign-in link, and a notice when someone shares a collection with you. Resend receives the recipient's email address and the message, including any link or collection name. Sign-in links expire after 5 minutes.

I process personal data under these legal bases:

• Website hosting and security: legitimate interests. I need to serve the site and keep it safe.
• Replying to email: legitimate interests, or steps before a contract if your message is about the beta. I need to answer you.
• App account and sync: contract. You ask ClipBolt to provide these features.
• AI features: consent. You allow them in the app.
• App analytics: consent. You turn it on in Settings.
• Legal claims: legitimate interests. I may need to establish, exercise, or defend a legal claim.

I use these providers to run the website and the app. Each one processes only what its role needs:

• Cloudflare: hosting and security for this website.
• My email provider: receiving the email you send me. Your email provider is the one you choose, and it processes the message under your relationship with it.
• OpenAI: AI tagging, image descriptions, image text extraction, translation, rephrasing, and chat.
• TypeSafe: item-type classification when local detection leaves the type unresolved.
• AWS S3: storing synced images and files.
• Resend: delivering sign-in and collection-share emails.
• PostHog: app analytics, only after you turn it on. PostHog does not receive website analytics.

I do not sell your data or share it with data brokers.

Some providers process data in the United States and other countries. Where GDPR requires safeguards, transfers rely on the provider's Standard Contractual Clauses or an adequacy decision. The providers' data processing terms describe the safeguards they use. You can email me for the current details.

• Website email: I delete emails 12 months after the last reply, unless I need them for a legal claim. I do not store contact messages in a website database. Cloudflare keeps operational and security logs under its own retention schedule.
• History on your device stays until you delete the items or remove the app and its data.
• Synced items, files, and AI results stay on ClipBolt's servers until you delete them or delete your account. There is no automatic expiry.
• When you delete a synced item, ClipBolt keeps a small deletion record without its content so your other devices remove it too. Deleting your account removes these records.
• Your AI permission record stays until you turn AI features off or delete your account.
• Sign-in links expire after 5 minutes. Signed-in sessions expire after 7 days without use. Records used to limit repeated requests are deleted automatically after they expire.
• Copies held by OpenAI, TypeSafe, AWS, PostHog, and Resend follow those providers' retention terms, described above where they have published them.

• Turn off Integrate with system clipboard, Auto detect source app, Auto detect source website, AI features, Auto tag and classify with AI, or Share usage analytics linked to your account in Settings.
• Delete individual history items in the app. If you are signed in, the deletion syncs to your account.
• Delete your account in the app. This deletes your account and its sessions, synced items, stored images and files, tags, AI results, settings, and AI permission record from ClipBolt's servers. It does not delete copies that providers already hold under their own retention terms.
• Email me for a copy of your account data. I can export your account details, items, tags, AI results, settings, and AI permission record.

You have the right to:

• Access the personal data I hold about you.
• Receive a copy of it in a portable format.
• Ask me to correct it.
• Ask me to delete it.
• Ask me to restrict how I use it.
• Object to processing based on legitimate interests.
• Withdraw consent at any time for AI features or app analytics.
• Complain to a data protection authority.

Email [email protected] to exercise any of these rights. I reply within one month. I may ask for information to confirm your identity before I act.

Withdrawing consent does not affect processing that already happened. You can turn off AI features or app analytics in Settings at any time.

The app sections above explain how to delete your account and get a copy of your data.

If you are in the EU or UK, you can complain to your local data protection authority. The EDPB lists them at edpb.europa.eu. Outside the EU and UK, you can contact your local authority.

The website uses HTTPS. Cloudflare provides security filtering. I keep dependencies updated and limit access to my email and admin accounts.

The website does not store contact messages in a database. The app stores data as described above.

No system is perfectly secure. If a breach affects your rights, I will notify you and the relevant authority as required.

I will update this policy when my practices change. Changes will appear on this page with a new Last updated date. If I change what AI providers receive, the app will ask for your permission again before sending anything.