Privacy Policy

Effective 2026-10-01. Veldaron Labs LLC, Illinois, United States.

Clipveil is a clipboard manager. Your clipboard is about the most sensitive stream of data on your computer, so this policy is written to be read, not to be survived. If anything here is unclear, email support@veldaron.com and ask.

The short version

• Use it without an account and nothing ever leaves your device.
• Turn on sync and your clipboard is encrypted on your device first. We store ciphertext we hold no key for.
• We never see your clipboard contents, your passphrase or your recovery key.
• There is no analytics or telemetry. Crash reports and update checks exist, and both ask first.
• We do not sell anything to anyone, ever.

What stays on your device

Your clipboard history is stored in a local database on your own machine. Without an account, that is the entire system: there is no server involved, no account to create and no network request made with your data.

Content that an app marks as confidential, which is what password managers do when they put a password on the clipboard, is never recorded at all, on any tier. You can also add specific apps to an ignore list, and nothing copied while those apps are frontmost is recorded.

What we store when you turn on sync

Sync requires an account. With one, the following is stored on our servers:

• Your email address and a password hash, to sign you in.
• Your clipboard items, encrypted. Each item is sealed with AES-256-GCM using a key derived from your passphrase with Argon2id, on your device, before it is uploaded. We receive ciphertext and cannot decrypt it.
• The names of your pinboards, encrypted, the same way.
• A key check value and a salt, used to tell you that you typed the wrong passphrase instead of silently failing to decrypt. Neither reveals your passphrase.
• Timestamps and sizes, which sync needs to order and reconcile changes across your devices.
• Subscription status, sent to us by our payment processor.

Images and files are not uploaded. They stay on the device that copied them.

What we genuinely cannot see

Your passphrase never leaves your device, is never transmitted and is never stored by us in any form. Neither is the recovery key. This means we cannot read your clipboard, cannot reset your passphrase, and cannot recover your synced history for you if you lose both the passphrase and the recovery key. We are telling you plainly because it is a real consequence of the design, and a service that could reset it for you would be a service that could read it.

Who else is involved

• Supabase hosts the database and authentication. They hold the encrypted data and your email address. They cannot decrypt your clipboard either.
• Stripe is the merchant of record for purchases, through Stripe Managed Payments and its checkout service, Link. Stripe collects and processes your payment details and billing address under its own privacy policy. We never see your card number. Stripe tells us only that an account is paying and when the paid period ends.
• Cloudflare serves this website.
• Sentry receives crash reports, but only if you switch them on. See below for what a report can and cannot contain.

That is the complete list. There are no advertising networks, no trackers, no data brokers and no analytics provider.

Update checks (Mac)

The Mac app asks, on its second launch, whether it may check for updates automatically. If you agree, about once a day it downloads a small update list from clipveil.veldaron.com. That request carries the app's version number and your IP address, as any web request does, and nothing else: no account, no device identifier, no system profile. You can switch it off in Settings, or check by hand from the menu. Updates are only installed if they are signed with our key and notarized by Apple.

Crash reports

Off by default. The app sends nothing unless you turn on "Send anonymous crash reports" in settings, and you can turn it off again at any time.

If you do turn it on, a report contains the crash location and little else. Before anything is sent, the app removes:

• Local variable values from every stack frame. On a crash inside the capture or encryption code, that is where a clipboard item would be.
• Source context lines around the crash.
• Quoted text, email addresses, URL paths and query strings, and long tokens from any error message.
• Your home directory, replaced with a placeholder, so your real name is not in file paths.
• Your account, IP address and device name.

Screenshots and view hierarchies are never captured, because the history panel is your clipboard drawn on screen. Breadcrumbs, the running log of what the app was doing, are disabled entirely rather than filtered.

Reports are processed by Sentry. The keyboard and share extensions do not include the crash reporter at all.

How long it is kept

Encrypted items stay until you delete them. Deleting an item or clearing your history on any device removes it from the server too. Items that only age out of a device because of your own history limit are removed from that device but stay on the server, still encrypted, until you delete them or your account. A plan ending never removes anything; it only limits how many clips the app shows.

You can delete your account yourself from the Account section of the app, on Mac or iPhone. That immediately removes your profile, every encrypted item and every pinboard from the server, and cancels any subscription first so you are not billed again. History already on your own devices is left alone. If you cannot sign in, email support@veldaron.com and it will be done by hand within 30 days.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to processing. Email support@veldaron.com and we will act on it. Note that we can only export your clipboard data as the ciphertext we hold; your own devices are the only place it can be read.

Children

Clipveil is not directed at children under 13 and we do not knowingly collect their data.

Changes

If this policy changes in a way that affects what we collect, we will say so in the app before the change takes effect, not quietly update this page.

Contact

Veldaron Labs LLC · support@veldaron.com