Skip to content
    Clip & Board

    Privacy Policy

    Effective

    In short

    We collect nothing.
    No account, no servers, no analytics and no tracking. Nothing you copy is ever sent to us.
    Your history is stored on your Mac, encrypted.
    Unless you turn on Sync, which sends new copies only to your own paired Macs on your local network.
    You decide what’s kept.
    Choose how long history is kept, pause capture, delete items, or clear everything.

    Who we are

    Clip & Board is a clipboard manager for macOS, made by DevTownHall. This policy explains what the app does with your information. It covers Clip & Board from the Mac App Store and from GitHub. It doesn’t cover this website, devtownhall.com, which uses Vercel’s cookieless analytics and performance monitoring.

    What we collect

    Nothing. Clip & Board has no account. It doesn’t send your clipboard history, your settings, or anything about how you use it to DevTownHall or anyone else. There are no analytics, no tracking, no ads and no third-party code in the app.

    Information only reaches us in the two ways described below: through Apple if you’ve chosen to share analytics with app developers, and when you email us.

    What’s stored on your Mac

    Clip & Board keeps your history in a database on your Mac. The folder still has the app’s earlier name, ClipVault:

    • From GitHub: ~/Library/Application Support/ClipVault/
    • From the Mac App Store: ~/Library/Containers/com.devtownhall.clipvault/Data/Library/Application Support/ClipVault/
    What Clip & Board stores, and how
    StoredHow
    The text and links you copyEncrypted
    The preview shown in the list: the first 200 characters, or a mask for sensitive itemsEncrypted
    When each item was copied, and its type, size, sensitivity, favorite flag and expiry timeNot encrypted
    A fingerprint of each item, used to spot duplicates. It can’t be reversed without the keyKeyed hash
    Your settings, such as retention, shortcut and sensitive-data policiesNot encrypted

    Encrypted means AES-256-GCM. The encryption key is kept in your macOS Keychain, never next to the database. Clip & Board stores text and links only.

    What the app never does

    • Connect to the internet. The app has no internet code: no servers, cloud, uploads or update checks.
    • Collect analytics or telemetry, or send crash reports of its own.
    • Show ads or track you across apps and websites.
    • Send anything to an AI service.
    • Include third-party code. It’s built only on Apple’s frameworks.

    Sensitive data

    Clipboards often hold passwords, keys and codes, so Clip & Board checks each copy on your Mac with built-in rules. By default:

    • Secrets it recognises, such as private keys and API keys, are never stored.
    • Other sensitive items, such as session tokens (JWTs) and one-time codes, are deleted after 30 seconds.
    • Anything a password manager marks as concealed or transient isn’t recorded.

    Detection is heuristic. It can miss a secret with no recognisable shape, which is then stored like any other text, still encrypted. It can also mistake ordinary text for a secret. You can change these policies in Settings → Privacy.

    Clip & Board can’t control the macOS clipboard itself: whatever you copy can be read by any app until you copy something else. You can have it clear a pasted secret from the clipboard after 30 or 90 seconds, in Settings → General.

    Sync between your Macs

    Sync is optional, and off until you turn it on in Settings → Sync. It’s the only time Clip & Board uses the network.

    • Pairing. One Mac shows a one-time code, and you type it on the other. Only Macs you pair this way can sync.
    • What’s sent. Each new item you copy (its text, its type and when you copied it), sensitive items included, goes to your paired Macs that are on the same local network at that moment. Your Mac’s name and a random device ID are sent too, so the other Mac can show which Mac it’s paired with. Existing history isn’t sent, and secrets this Mac doesn’t store are never sent.
    • How. Directly from Mac to Mac, encrypted with TLS. There’s no server, relay or cloud. Nothing goes to the internet or to us.
    • On the other Mac. The item is stored under that Mac’s own settings and, unless you turn it off, put on its clipboard.
    • What others on your network can see. That a Mac is running Clip & Board, under a random ID rather than your Mac’s name, and when encrypted data is sent and roughly how much. Not what it contains.
    • Unpairing. Unpairing a Mac in Settings → Sync deletes the pairing key, and the two Macs stop syncing.

    Permissions

    macOS asks you before Clip & Board can use:

    • Clipboard access (macOS 15.4 and later), to record what you copy. Without it, Clip & Board records nothing.
    • The Keychain, to store and read the encryption key.
    • The local network, only when you turn on Sync, to find and reach your paired Macs.
    • Accessibility, only in the version from GitHub, and only if you turn on Paste automatically, so Clip & Board can press ⌘V for you. The Mac App Store version doesn’t ask for it.

    Deleting your data

    Delete any item from the list, or everything in Settings → History → Clear All History. Items older than your retention setting are deleted automatically. A deleted item can be brought back for 5 seconds, and until then it stays in the database, encrypted. Sensitive items are deleted straight away.

    Deleted data is overwritten in the database file. Backups made by other software, such as Time Machine, may still hold older copies of the database, with the contents still encrypted.

    To remove Clip & Board completely:

    1. If you use Sync, unpair each Mac in Settings → Sync.
    2. Clear All History in Settings → History, then quit Clip & Board and move it to the Trash.
    3. Delete its folder: ~/Library/Application Support/ClipVault (from GitHub) or ~/Library/Containers/com.devtownhall.clipvault (from the Mac App Store).
    4. In Keychain Access, delete “Clip & Board history encryption key” and, if you used Sync, “Clip & Board sync device ID”.

    Apple, GitHub and crash reports

    Apple handles downloads from the Mac App Store, and GitHub handles downloads from GitHub, under their own privacy policies: Apple’s and GitHub’s.

    If you’ve turned on “Share with app developers” in your Mac’s analytics settings, Apple may share crash reports and usage statistics for the Mac App Store version with us. That data comes from Apple, not from Clip & Board, and Apple’s privacy policy covers it. We use it only to find and fix problems.

    Children

    Clip & Board doesn’t collect personal information from anyone, including children.

    Changes to this policy

    If this policy changes, we’ll publish the new version on this page and update the date at the top.

    Contact

    Questions about privacy in Clip & Board? Email [email protected]. We receive your email address and what you write, and use them only to reply to you.