Privacy

What stays on your device

• The text you paste into copypaster. It is never transmitted, logged, or stored on our servers.
• Your typed output. The keystrokes go to whichever app has focus on your machine — copypaster doesn't see them.
• Your config: WPM, typo frequency, theme, etc. It lives in a JSON file in your user-data folder.

What we collect, and why

1. Trial heartbeats

While you're on a free trial, the app sends a small heartbeat to our backend so we can count remaining pastes and detect tampered counters. The heartbeat includes:

• An anonymous machine identifier (a SHA-256 hash of hostname + MAC addresses — not reversible to your name or email).
• Your operating system (e.g. "win32"), app version, and device hostname (whatever your machine reports — often "DESKTOP-XYZ").
• The number of trial pastes used.
• Approximate location: country, region, city — derived from your IP by Cloudflare. We do not store your IP address itself.
• Your system's IANA timezone string (e.g. "Europe/Berlin").

This is how we know whether your trial is still active. Once you have a license, heartbeats stop and license validation takes over.

2. Product analytics

When analytics is enabled (default on), the app logs events about how it's being used so we can improve it. Each event includes:

• Event type — e.g. install, first_open, paste_started, paste_completed, activation_attempt.
• Length, in characters, of the text being typed (for paste events) — never the text itself.
• Platform, app version, your subject identifier (the same trial-machine hash, or your license key once activated), country / region / city (from Cloudflare), and timezone.

The contents of your clipboard are never part of an event. If we wanted to know whether a particular string of text was pasted, we couldn't tell you. The data doesn't exist on our side.

You can turn analytics off in Settings → Analytics. When off, the app sends no events. Trial heartbeats are separate and continue while you're on a trial.

3. License activation

When you activate a license, we store the email tied to your Stripe receipt and the devices you've activated on (the machine identifier + a friendly hostname). You can see and revoke these on the Manage page.

4. Marketing site analytics

This website (copypaster.app) uses Cloudflare Web Analytics and Microsoft Clarity for page-view counts and basic interaction telemetry. Both are configured to avoid storing personal data. They are not used inside the app.

What we don't do

• We don't sell your data.
• We don't share it with third parties beyond payment processing (Stripe), email delivery (Resend), and the analytics services named above.
• We don't train AI models on it.
• We don't try to identify you behind the machine hash. The hash exists so that licenses bind to a device — not so that we can profile you.

Retention

• Trial records: 30 days after the last heartbeat.
• Analytics events: 180 days, then automatically deleted.
• License records: kept for the lifetime of your license, plus a reasonable period for refunds and support.

Your rights

Email [email protected] if you want a copy of what we have on you, or want it deleted. We'll get back to you within a few days — it's a small operation, but we read every email.