Privacy Policy

Who we are

MagPaste ("we", "us") makes the MagPaste app for Mac (the "App") and runs magpaste.com (the "Site"). For anything about your data, email support@magpaste.com.

What stays on your Mac

• Your clipboard history: text, links, images, files, colors and the text read from images. It's stored only on your Mac, encrypted with AES-GCM, with the key kept in your Mac's Keychain.
• Text in images is read on your Mac by Apple's built-in frameworks. Nothing is uploaded.
• Items that apps mark as confidential or temporary, such as passwords copied from a password manager, are never saved. Card numbers, login codes and API keys are hidden and deleted after the time you choose.
• Your settings.

We have no server that stores clips and no way to access them. Delete one clip or everything at any time; deleting the App and its data removes it all.

Permissions macOS asks for

• Accessibility, so the App can paste into the app you're using (it presses ⌘V for you when you pick a clip). Without it, the App copies the clip and you paste.
• Desktop, Documents and Downloads, only if you turn this on, so files you copied from there can be pasted. The App opens a file only when you paste or copy it.
• Your screenshot folder, only if you turn on "Save new screenshots", so new screenshots are added to your history.

None of these send anything anywhere. You can turn each one off in System Settings → Privacy & Security.

When the app goes online

The App contains no analytics, advertising, crash reporting or tracking code. It connects only for:

• License checks: your license key, an anonymous device ID (a one-way hash, not your serial number), your Mac's name and the App version go to our payment partner to activate and confirm your key, about once a day.
• Update checks: the App reads a small file on our Site to see whether a newer version exists. Like any web request, this shows your IP address and the App version.
• License notice: only when a license check doesn't succeed, the App reads a small signed file on our Site that can keep it working while our payment partner has a problem. It contains no personal data.

When you open a link from your history, it opens in your browser, under that site's own policy.

When you buy

Payments are handled by Dodo Payments, the Merchant of Record for every order. They collect your name, email, billing country and payment details to process the order and taxes, under their own privacy policy shown at checkout. We never see your card number.

We receive your name, email, country, what you bought and when, and your license key. We use them to deliver and verify your license, send receipts, help you, and meet tax and accounting rules.

This website

• No cookies, no ads, no trackers. Fonts and our own scripts come from our domain; the only outside script is Cloudflare's visit counter below.
• We count visits with Cloudflare Web Analytics, which uses no cookies and no fingerprinting. It shows us totals such as pages viewed, where visitors came from, browser and country.
• The Site is hosted by Cloudflare, which briefly processes your IP address to deliver pages and stop attacks.
• If you choose light or dark mode with the button at the top, your browser remembers that choice. It stays on your device and is never sent to us.

Email and support

If you email us, we use your address and message only to reply and handle your request. Our email is hosted by Zoho Mail. We keep support emails for up to 3 years, then delete them.

Who we share data with

We never sell or rent your data. We use a few providers who process it only to run our service:

• Dodo Payments: payments, taxes, receipts and license keys.
• Cloudflare: website hosting, security and visit counts.
• Zoho Mail: our support email.

We may also disclose data when the law requires it, or to protect our rights and the safety of others.

How long we keep it

• Purchase records: as long as tax and accounting law requires.
• Support emails: up to 3 years.
• Your clipboard history: on your Mac, until you delete it.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR or California law), you may ask to see, correct, delete or export your data, or object to or limit how we use it. Email support@magpaste.com and we'll reply within 30 days. You can also complain to your local data protection authority.

We use your data to fulfil our agreement with you (selling and supporting your license), to meet legal duties such as tax records, and for our legitimate interest in keeping the App and Site secure and working.

International transfers

Our providers may process data outside your country. Where the law requires it, they use safeguards such as standard contractual clauses.

Security

The most personal data, what you copy, never reaches us. For the little we do hold, we limit access and use providers with strong security. App updates are signed and checked before they install, and the App is notarized by Apple. Found a security problem? Email support@magpaste.com.

Children

The App isn't meant for children under 13 (or under 16 where local law sets that age), and we don't knowingly collect their data. If a child has bought it, email us and we'll delete their data, except what tax law requires us to keep.

Changes

If we change this policy, we'll update the date at the top. For important changes, we'll say so on the Site and email customers before the change takes effect.