Privacy Policy
Last updated: June 25, 2026
This Privacy Policy explains how clipboard.live (“we”, “us”, or the “service”) handles information when you use our live clipboard application. By using the service, you agree to the practices described here and in our Terms of Use.
The short version
We built clipboard.live to share text without keeping a copy of what it says. Clipboard content is encrypted before it ever reaches us, and we store only ciphertext — never plaintext. You can strengthen this by choosing full-link sharing, which keeps the encryption key entirely out of our hands (true end-to-end encryption). With code-only access, the key is stored on our server so anyone with the 6-digit code can open the clip.
Information we collect
Account data. If you create an account, we store your email address and a salted hash of your password through our authentication provider. We do not see or store your password in plaintext.
Clipboard data. Each clip stores: the 6-character code, encrypted content (AES-GCM ciphertext and its initialization vector), expiry time, access settings, an optional password hash and per-clip salt, a hash of your write token, and (for logged-in creators) your user id.
- Full-link mode (end-to-end): the encryption key travels only in the share link's URL fragment and never reaches our servers. We cannot decrypt your content.
- Code-only mode: the encryption key is stored server-side so the clip can be opened with the 6-digit code alone. We could technically decrypt such clips.
We never store clipboard content in readable (plaintext) form.
Local browser storage. Your browser stores your write token, theme preference, and — for full-link clips you create or open — the encryption key. This data lives on your device; clearing your browser removes it.
Payment data. Subscriptions are processed by Wix Payments. We receive a confirmation of your subscription status and, if relevant, your email for account linkage. We never receive or store your card number or other payment instrument details.
How we use information
- To operate the live clipboard: storing and serving encrypted clips, enforcing expiry and access rules.
- To authenticate you and link clips to your account when you are logged in.
- To process and verify Pro subscriptions.
- To prevent abuse (rate limiting, brute-force protection on password-protected clips).
- To maintain and improve the service through aggregated, non-identifying usage metrics.
We do not sell your data, and we do not use clipboard content for advertising or model training.
Data retention and deletion
Clips are ephemeral by design. A clip is automatically deleted when it expires, when its self-destruct condition is met, or after repeated failed password attempts. As the creator, you can delete a clip at any time.
Account and subscription records are kept for as long as your account is active. You may request deletion of your account; we will remove or anonymize your personal data, except where retention is required for billing or legal obligations.
Security
Content is encrypted with AES-GCM. Passwords and write tokens are hashed with per-clip salts and compared using constant-time checks. Password-protected clips burn themselves after five failed attempts. All responses are served with no-store caching headers.
No online service is fully secure. You use the service at your own risk — see our Terms of Use for the complete disclaimer.
Cookies and local storage
We do not use advertising or tracking cookies. We rely on your browser's local storage for the functional data described above (write token, theme, link-mode keys). No third-party analytics cookies are set.
Third-party services
- Wix Payments — subscription checkout and processing.
- Base44 — application hosting and infrastructure.
These providers process data under their own privacy policies. We share only what is necessary to operate the service.
Your rights
You may access, correct, or request deletion of your personal data. Because the content itself is encrypted and unlinkable to you in full-link mode, deleting your account removes the identifying linkage while expired clips self-delete automatically.
Children
The service is not intended for anyone under 16. We do not knowingly collect personal data from children. If you believe a minor has registered, contact us and we will remove the account.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by the “Last updated” date above. Continued use after changes constitutes acceptance.
Contact
Questions about privacy can be sent to the contact details provided in our Terms of Use.