Your data, in plain language.

Privacy policy

Last updated 2 November 2026 · ClipSwitch and this website

1. The short version

ClipSwitch is a local clipboard-history app from Zeptura. It does not send your clipboard history to Zeptura, provide cloud sync, or include advertising, built-in analytics or tracking SDKs. There is no ClipSwitch account. History is stored locally. Only recognized password payloads saved with the optional encryption setting are encrypted by ClipSwitch; other history and metadata are not. Apple processes purchases; optional support messages and website requests are different from local clipboard history.

2. What the app stores

After you allow recording, ClipSwitch can retain supported copied text, links, images and richer representations, such as RTF or HTML. It also stores metadata needed for history and search: capture and last-copy/use times, excerpts, content type, best-effort source-app name or identifier, preferences and, with Pro, favorites and collections.

Copied files are represented by file URLs and, where available, read-only security-scoped bookmarks. These can contain file-reference and location information. The app may resolve authorized references to show names, types, sizes or icons and to restore them. It does not create backup copies of the referenced files, recursively read folders or automatically fetch copied web links. File-provider or operating-system services may independently handle referenced cloud files under their own policies.

ClipSwitch keeps its history in its macOS sandbox container. OS account protection, disk encryption and device backups are controlled by your environment, not promised by ClipSwitch.

3. Consent, permissions and sensitive information

Recording starts only after your in-app consent and is subject to macOS clipboard controls. You can pause or revoke recording in Settings. Revoking recording stops new capture; it does not delete saved history. Copies made while recording is disabled or access is denied are not backfilled when access returns.

Recognized passwords are ignored by default. You can enable Save passwords in history in Settings, then choose Encrypt saved passwords, which defaults to on. Changes apply only after Save and affect new copies; existing entries keep their original storage mode. Password detection uses recognized concealed/password markers and known sources such as Apple Passwords, not arbitrary password-like text. Transient and auto-generated copies and your excluded apps remain excluded regardless of the password settings. These filters are not a security boundary and cannot reliably identify every secret. Source attribution can be wrong or unavailable. Pause recording before copying sensitive information. Do not use clipboard history as a password manager.

Saved passwords stay masked in history, preview and accessibility text and are not indexed as searchable content. Masking is not encryption. With encryption off, the original representation data is readable in local storage and backups, even though it remains hidden on screen. With encryption on, ClipSwitch encrypts the supported original representations using Apple's system AES-256-GCM. It stores a randomly generated, app-owned key in macOS Keychain, not in history or preferences. The app does not read your saved Passwords vault. Key preparation requires explicitly saved encrypted capture and recording consent; macOS decides whether to show an access dialog and may allow access without asking. A later capture or explicit restore can also require Keychain authorization. Denied or missing keys and failed authentication stop that save or restore, with no plaintext fallback. Source names, times and other history remain unencrypted.

To recognize another app repeating protected text without its privacy markers, ClipSwitch briefly processes plain-text representations and keeps only temporary, randomly keyed fingerprints and the original privacy classification in memory, not the text itself. These fingerprints expire after ten minutes, are limited to 128, and are never saved or sent anywhere. Recognized password echoes retain the selected password-storage policy, while recognized transient echoes stay excluded. This safeguard covers text representations up to 64 KiB; it cannot reliably identify changed text, an original copy missed between observations, or unmarked passwords copied only inside a remote session. Remote applications are not excluded by default.

Multiple observations of the same password, including clipboard re-publication after a single copy action, reuse an existing entry and its original source, storage mode and favorite/collection state. Comparisons use temporary, randomly keyed fingerprints in memory, never saved password hashes; new password observations may decrypt existing entries only as needed for duplicate comparison. Startup, search and preview never decrypt passwords. Existing duplicate entries are not automatically consolidated or deleted. Unmarked full email addresses and web/mailto URLs copied from Passwords remain ordinary text or links; explicit password markers and remembered protected echoes still take priority, even when a password looks like an email or URL. Other unmarked fields cannot reliably be distinguished from passwords.

Restoring an entry fills the system clipboard; you paste it manually. Explicit restoration decrypts saved passwords as needed and adds concealed/password markers for other clipboard consumers. Those markers are advisory: other apps may still read the clipboard subject to macOS controls. ClipSwitch does not request Accessibility permission or synthesize paste keystrokes.

4. Retention and automatic deletion

The Free tier stores at most five clippings for seven days since their last copy or successful use. Other payload and storage limits may remove entries sooner. Pro supports configurable history count, storage and non-favorite retention within supported limits; favorites are protected from ordinary automatic expiry and eviction while Pro is available.

A confirmed Free entitlement result—including after a refund or revocation—deletes favorites, removes collections and memberships, and permanently removes expired or excess history without an additional confirmation or archive. Restoring Pro does not recover deleted entries. Saved Pro preferences can remain for a later verified unlock.

An unknown/loading entitlement state, an unverified transaction, purchase cancellation, a pending purchase or a product-loading error is not itself a confirmed downgrade and does not trigger that deletion policy. New recording waits while startup access is unresolved. Verification errors preserve existing data and the last established access, subject to its existing retention rules.

5. Deleting history

You can delete individual clippings, clear non-favorites or use Erase all in Settings. Erase all logically removes active clipping records, payloads, file bookmarks and searchable entries. It does not reset all app preferences or remove collection names, original files, the current system clipboard, external backups or operating-system snapshots. Logical deletion is not a verified forensic or secure wipe. Backups can retain deleted information; restoring an old backup can bring it back.

Disabling password recording or changing encryption mode does not delete or convert saved entries. They remain restorable in their original mode and follow the same Free/Pro retention and storage rules. Clearing history does not delete its Keychain key. That key is device-only and non-synchronizing; losing it can make encrypted entries unrecoverable, and a database backup alone is not sufficient. ClipSwitch does not silently replace a missing key while saved encrypted entries still depend on it. Earlier unencrypted data and backups are not encrypted retroactively.

Zeptura does not have remote access to your local history to retrieve, export or erase it for you. Keep originals of anything important. See the separate Terms for data-loss and warranty information.

6. Purchases

Pro is a one-time, non-consumable purchase processed by Apple. Apple handles payment and account details under Apple's policies. ClipSwitch uses verified product and transaction information locally to determine access and support Restore Purchases. The app does not receive your full payment-card details or send your clipboard content to Apple as part of purchase handling. There is no Zeptura purchase server.

7. Contact and support emails

If you email support@zeptura.com, your email address, message, attachments and ordinary email metadata are processed to respond and resolve the request, using the relevant email-service providers. Do not send passwords, full clipboard databases or sensitive screenshots. Share only the information needed, and redact personal content.

Support correspondence is retained as reasonably necessary to handle the request, follow-up, legal obligations or disputes. Ask about deletion or applicable privacy rights by email; some records may need to be retained where the law permits or requires it. We do not promise a response time or recovery of lost local data.

8. This website is separate from the app

This static site includes no analytics, advertising, third-party font/CDN scripts, tracking pixels, forms or cookies set by its code. The appearance switch changes only the current page; it does not store a browser preference. Following an external link or sending email involves that destination's services.

Website requests reach hosting infrastructure. Hosting or delivery providers may process IP addresses, request paths, timestamps, browser/request headers and security logs to deliver and protect the site. Specific logging and retention depend on the hosting configuration, provider practices and applicable legal obligations. Contact support@zeptura.com for information about website-request processing. Local-only app history does not mean website or email requests leave no records.

9. Your choices and rights

Use the app's recording, retention, exclusion and deletion controls for local history. For information you send us, contact support@zeptura.com to ask about access, correction, deletion or other rights available under applicable law. Where applicable, you may also contact a relevant data-protection authority. We may need proportionate information to verify a request; do not send a clipboard database as proof of identity.

10. Changes and contact

This page should be updated when the app's data practices or the website's hosting change, with the date revised above. Material changes may require additional notice or consent under applicable law. Privacy questions: support@zeptura.com.