Privacy policy
How MyClippy and this website handle your information. MyClippy is developed by Intelligentia Studios.
Scope
This policy covers the current MyClippy local pilot for Android, macOS and Windows, and getmyclippy.com. The app transfers text and links over a local network. The native apps have no account registration, cloud clipboard service, advertising SDK, analytics SDK or payment system. Optional website analytics are described below and are separate from the apps.
Clipboard text and links
MyClippy accesses text you explicitly send, text received from connected devices, and new copies when you enable automatic sharing. Copied text can contain personal or sensitive information. It is transmitted to the local desktop host and participating MyClippy installations to provide clipboard sync. Intelligentia Studios does not operate a server that receives this clipboard content. Do not copy passwords, payment details or other secrets while sharing is enabled. The app skips clipboard items marked sensitive, but other apps do not label every secret.
Optional Android Accessibility access
If you separately consent and enable the Accessibility service, MyClippy examines copy/cut interaction labels, relevant event text, source app identifiers and system clipboard-window metadata to detect copying while you use other apps. It briefly focuses a transparent Accessibility overlay to read a fresh clipboard item, then sends the text through the local session. This is experimental and may affect window focus or miss copies. It does not take screenshots, record your screen, or record keystrokes. The service is not an accessibility tool for people with disabilities. You can decline and use Android Share or the in-app Send clipboard action instead, or disable automatic copy later.
Connection and device information
Local discovery and enrollment exchange a random installation identifier, device/platform name, local network address and session information. The desktop host and participating devices use these to discover devices, display connection status and deliver clips. These are not advertising identifiers. MyClippy does not request location, contacts, camera, microphone, SMS or storage-library access. Network addresses and Android copy-event metadata may still reveal contextual information.
Security and the pilot’s network boundary
Clipboard payloads use AES-GCM encryption and Android stores saved session credentials using Android Keystore protection. However, the current local HTTP enrollment process shares the session credentials over the LAN, and every reachable MyClippy installation can join without device approval. A participant or network observer may obtain access. This is not account-isolated or authenticated end-to-end protection against other LAN users. Use only a private network where you trust all participants. Backups of Android app data are disabled.
Storage and retention
Android keeps up to 20 recent clips in process memory. Its outgoing retry queue stores up to 16 encrypted items; each is eligible to send for two minutes from the original copy. Expired queued items are cleaned when the app runs, rather than by a guaranteed timer while it is stopped. Session credentials, settings, a random installation ID and ordering/deduplication metadata are stored locally. Desktop hosts hold up to 100 encrypted transfer events in memory, with a roughly 15-minute eligibility window and cleanup during operation. Received text may remain in each device’s system clipboard, clipboard manager or any app where you paste it under that software’s own rules.
Control and deletion
Pause sync to stop new transfers and clear unsent Android queue items. Turning off automatic copy stops future automatic capture. Privacy & data in the Android app offers Clear local data, which stops sharing and asks Android to erase the app’s private data. Android Settings → Apps → MyClippy → Storage → Clear storage, or uninstalling the app, also removes its local app data. Clear the clipboard and any saved copies on each device separately. Deleting local data cannot recall a transfer already sent or remove text pasted into another app. There is no MyClippy account to delete.
Diagnostics
Local diagnostic counters and system logs describe connection status, event identifiers, timing, errors and text byte counts. The app does not intentionally log clipboard text or session secrets and has no automatic crash-report upload. If you send us logs or screenshots for support, check and remove private content first.
Website and support services
Vercel hosts this website and processes request information such as IP address, browser information, requested URL and time to deliver and protect it, according to its own terms and privacy policy. We do not embed advertising pixels. When website analytics are configured, Google Analytics loads only after you choose Allow analytics. It measures page visits, guide interactions, coarse compatibility choices and download clicks, along with browser/device information and approximate location. Google receives the network request, including your IP address; Google processes IP addresses for purposes such as coarse location and spam detection and states that raw IP addresses are discarded after use. The website does not read your clipboard. We strip page query strings and fragments, limit campaign labels and event fields, and do not send support-message text, device names or clipboard contents to Analytics. Download clicks do not prove an installation. We configure user-level and event-level Analytics retention to 14 months, without resetting the retention period on new activity. Aggregated reports can remain available beyond that period. Google processes analytics data under its own privacy policy, potentially outside your country. Emailing support sends your address, message and any attachments to our Gmail mailbox, processed by Google. Opening GitHub support or download links is subject to GitHub’s policies. Never include clipboard secrets in support messages or public issues.
Analytics choice and storage
Analytics are off until you opt in. No thanks leaves them off, and browser Do Not Track or Global Privacy Control signals keep them off. Analytics preferences in the footer lets you change your choice; withdrawing permission removes this site’s Google Analytics cookies and reloads the page without the tag. The choice is stored in this browser for up to 180 days. Analytics cookies are configured to expire after 180 days without renewal. We do not enable Google signals, advertising personalization, session replay or native-app analytics. Clearing browser storage also resets your choice. Withdrawal stops future collection but does not itself erase records already processed by Google; contact us with a deletion question without sending clipboard contents.
Support retention and your requests
We retain support correspondence for as long as needed to resolve the request, maintain relevant support records or meet a legal obligation. You can request deletion by email; we do not currently operate an automatic deletion schedule for the support inbox. Hosting and email providers may retain operational records or backups under their policies. Contact us to request access, correction or deletion of information you sent us. We cannot remotely erase data held only on your devices or another participant’s device. We do not sell personal information or use clipboard content for advertising or AI training.
Audience and updates
The current pilot is intended for adults managing their own devices and is not directed at children. We may update this policy as the product changes; the date above identifies this version. Material changes to sensitive-data access will require updated disclosure and consent where applicable.
Contact
For privacy questions, support requests or deletion of support correspondence, contact Intelligentia Studios at intelligentiastudios@gmail.com. Include only the information needed to handle your request.