clipboardsyncer

Privacy Policy

Last Updated: July 2026

1. Introduction

Welcome to ClipboardSyncer ("we," "us," "our," or the "Company"). ClipboardSyncer is operated by ZentrX, based in India. We are committed to protecting and respecting your privacy in accordance with applicable data protection laws including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Information Technology Act, 2000 (India).

This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal information when you visit our website at clipboardsyncer.com and use our online clipboard synchronization tool, including both our free tier and Pro subscription plan (collectively, the "Service"). This policy applies to all users worldwide, regardless of location.

By accessing or using ClipboardSyncer, you acknowledge that you have read, understood, and agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use our Service.

2. Information We Collect

We collect different types of information depending on how you interact with our Service. We are committed to collecting only the minimum amount of data necessary to provide and improve our Service.

2.1 Information You Provide Directly

When you interact with certain features of our Service, you may voluntarily provide us with personal information, including:

  • Contact Form Submissions: When you use our contact form (powered by Formsubmit), you may provide your name, email address, and message content. This information is used solely to respond to your inquiry or support request.
  • Account Creation (Pro Plan): If you subscribe to our Pro plan, you create an account through Supabase authentication. This may include your email address, display name, and authentication credentials. Passwords are hashed and stored securely by Supabase; we never have access to your plaintext password.
  • Feedback and Communications: Any information you provide when communicating with us via email or other channels, including the content of your messages and any attachments.

2.2 Clipboard Content

The core of our Service involves handling clipboard text. It is important for you to understand exactly how this data is processed:

  • Local Storage Only: Text you paste into our clipboard tool is stored exclusively in your browser's localStorage on your device. This data never leaves your device unless you explicitly initiate a sync or file transfer. We do not collect, read, access, or transmit your clipboard content to our servers for the basic clipboard tool functionality.
  • Clipboard History: Your clipboard history (up to 5 items on Free, unlimited on Pro) is maintained entirely in your browser's localStorage. This data is under your complete control and can be cleared at any time using our Clear button or by clearing your browser storage.
  • No Server-Side Storage of Clipboard Data: We want to be absolutely clear: your clipboard content is never permanently stored on any server we operate or control.

2.3 Sync Data

When you use our cross-device synchronization feature:

  • WebSocket Transmission: Clipboard text is temporarily transmitted through our WebSocket server (powered by PieSocket) to enable real-time synchronization between your devices using a shared room code.
  • No Persistent Storage: Sync data exists only during the active WebSocket connection. It is not written to disk, not stored in any database, and is immediately discarded when the connection closes or the sync session ends.
  • Room Codes: Temporary room identifiers are generated to facilitate device pairing. These are random, ephemeral, and not linked to any personal information.

2.4 File Transfer Data

Our file transfer feature uses peer-to-peer technology:

  • WebRTC Peer-to-Peer: Files are transferred directly between devices using WebRTC data channels. File content does not pass through or get stored on our servers.
  • Signaling Only: Our server is used solely for the initial signaling process (helping devices discover each other). Once the peer-to-peer connection is established, all data flows directly between devices.
  • End-to-End Encryption: WebRTC connections are encrypted by default using DTLS (Datagram Transport Layer Security), meaning file content is encrypted in transit between devices.
  • No Server Storage: We do not store, cache, or have access to any files you transfer between devices.

2.5 Automatically Collected Information

When you visit our website, certain information is collected automatically through standard web technologies:

  • IP Address: Your Internet Protocol address is collected for security purposes, analytics, and to facilitate WebSocket connections. IP addresses may be temporarily logged for abuse prevention.
  • Browser Type and Version: Information about the browser software you use (e.g., Chrome, Firefox, Safari) and its version number, collected for compatibility optimization.
  • Device Information: The type of device (mobile, tablet, desktop), operating system, and screen resolution, used for responsive design optimization.
  • Pages Visited: Which pages you view on our site, the order of pages visited, and the time spent on each page.
  • Referring Website: The URL of the website that directed you to ClipboardSyncer.
  • Date and Time of Access: Timestamps of when you access our Service.
  • Language Preferences: Your browser's language settings.

2.6 Payment Information (Pro Plan)

If you subscribe to our Pro plan:

  • Payment Processing: All payment transactions are processed by Razorpay, a PCI DSS compliant payment gateway. We do not collect, store, or have access to your full credit card number, debit card number, or bank account details.
  • Information We Receive: From Razorpay, we receive only a transaction confirmation, payment status, subscription ID, and the last four digits of your card (for your reference). We also store your subscription plan type and billing cycle information.
  • Razorpay's Privacy Policy: Your payment information is subject to Razorpay's privacy policy and security practices. We encourage you to review their privacy policy at razorpay.com/privacy.

3. How We Use Your Information

We use the information we collect for the following specific purposes:

  • Service Provision: To provide, operate, and maintain our clipboard tool, synchronization features, and file transfer capabilities.
  • Account Management: To create and manage your Pro account, process subscriptions, and authenticate your identity.
  • Cross-Device Sync: To facilitate real-time clipboard synchronization between your devices via WebSocket room codes.
  • Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical support.
  • Service Improvement: To analyze usage patterns, identify bugs, and improve the functionality and user experience of our Service.
  • Security and Abuse Prevention: To detect, prevent, and address technical issues, fraud, and abuse of our Service.
  • Communications: To send you service-related announcements, updates about features, and (with your consent) promotional information about new features or plans.
  • Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
  • Analytics: To understand how our Service is used so we can improve it and develop new features.
  • Advertising: To display relevant advertisements through our advertising partners, which supports the availability of our free tier.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and the United Kingdom, we process personal data only when we have a valid legal basis under Article 6 of the GDPR:

  • Consent (Article 6(1)(a)): Where you have given us explicit consent to process your data for specific purposes, such as sending marketing communications, placing non-essential cookies, or processing analytics data. You may withdraw consent at any time.
  • Contractual Necessity (Article 6(1)(b)): Where processing is necessary for the performance of a contract with you, such as providing Pro plan features after subscription, managing your account, or processing payments.
  • Legitimate Interest (Article 6(1)(f)): Where processing is necessary for our legitimate interests (or those of a third party), provided those interests are not overridden by your rights and freedoms. This includes improving our Service, ensuring security, preventing fraud, and conducting analytics to enhance user experience.
  • Legal Obligation (Article 6(1)(c)): Where processing is necessary to comply with a legal obligation to which we are subject, such as tax reporting requirements or responding to lawful requests from authorities.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store certain information when you use our Service. Below is a detailed explanation of each type:

5.1 Essential Cookies and Storage

These are strictly necessary for the website to function and cannot be switched off in our systems:

  • Theme Preference: Stored in localStorage to remember your light/dark mode selection across visits. No personal data is involved.
  • Session Identifier: A randomly generated identifier stored in localStorage to facilitate the sync feature and device pairing. This is not linked to any personal information.
  • Authentication Token (Pro users): A secure session token stored to keep you logged into your Pro account. This is essential for authenticated access to Pro features.

5.2 Analytics Cookies (Google Analytics)

We use Google Analytics (provided by Google LLC) to understand how visitors interact with our website. Google Analytics uses cookies to collect the following information:

  • Pages visited and time spent on each page
  • How you arrived at our site (referral source)
  • Your approximate geographic location (based on IP address)
  • Browser type, device type, and screen resolution
  • Interactions with site elements

Google Analytics data is aggregated and used to improve our Service. Google may also use this data in accordance with their own privacy policy. You can opt out of Google Analytics tracking by:

5.3 Advertising Cookies (Google AdSense)

We display advertisements through Google AdSense to support the availability of our free Service. Google AdSense uses cookies and similar technologies to:

  • Serve ads based on your prior visits to our website and other websites on the internet (personalized advertising)
  • Measure ad performance and frequency
  • Prevent the same ads from being shown repeatedly
  • Detect and prevent click fraud

Google uses the DoubleClick cookie and similar identifiers to serve ads. You can opt out of personalized advertising by:

  • Visiting Google's Ad Settings to manage your ad preferences
  • Visiting aboutads.info to opt out of third-party ad cookies
  • Enabling "Do Not Track" in your browser (see Section 12)
  • Using ad-blocking browser extensions

For more information about how Google uses your data in advertising, please visit Google's Partner Sites Policy.

5.4 localStorage Usage

In addition to traditional cookies, we use your browser's localStorage (which is technically not a cookie but functions similarly for data persistence). We store the following in localStorage:

  • Clipboard Content: Your current clipboard text and clipboard history items, stored for the core functionality of the tool.
  • Theme Preference: Your selected color theme (light/dark mode).
  • Session/Device ID: A random identifier for sync device pairing.
  • User Preferences: Settings such as auto-copy preferences and notification preferences.
  • Authentication State (Pro): Login state and session tokens for Pro plan users.

localStorage data remains on your device, is never automatically transmitted to our servers, and can be cleared at any time through your browser settings or our in-app Clear button.

6. Third-Party Services

Our Service integrates with or uses the following third-party services. Each has its own privacy policy governing how they handle your data:

  • Google Analytics (Google LLC): Web analytics service. Collects anonymized usage data. Privacy Policy: policies.google.com/privacy
  • Google AdSense (Google LLC): Advertising service that displays ads on our site. May collect data for ad personalization. Privacy Policy: policies.google.com/privacy
  • Razorpay (Razorpay Software Private Limited): Payment processing for Pro plan subscriptions. Handles all payment card data securely. Privacy Policy: razorpay.com/privacy
  • PieSocket: WebSocket service provider that facilitates real-time clipboard synchronization between devices. Privacy Policy available on their website.
  • Formsubmit: Contact form handling service. Processes form submissions including your name, email, and message content. Data is transmitted securely to our email.
  • Supabase: Backend-as-a-service used for Pro plan user authentication and account management. Stores user account data securely. Privacy Policy: supabase.com/privacy
  • Google Fonts: Typography service that may collect IP addresses when fonts are loaded. Privacy Policy: policies.google.com/privacy

We encourage you to review the privacy policies of these third-party services to understand how they process your data.

7. Data Storage and Security

7.1 Client-Side Storage

The majority of your data is stored client-side (on your device) using browser localStorage. This includes:

  • All clipboard text content and history
  • Theme and user preferences
  • Session identifiers for sync functionality

Client-side data is under your complete control. It is not accessible to us or any third party (unless your device is compromised). You can delete this data at any time.

7.2 Server-Side Storage

We maintain minimal server-side data:

  • No clipboard content is ever stored on our servers
  • Pro account data: Email, hashed password, subscription status, and billing information are stored securely in Supabase
  • Contact form submissions: Stored temporarily for customer support purposes
  • Server logs: Temporary access logs for security monitoring (automatically purged)

7.3 Encryption and Security Measures

We implement the following security measures to protect your data:

  • HTTPS/TLS: All communications between your browser and our servers are encrypted using TLS (Transport Layer Security) encryption.
  • WebRTC Encryption: File transfers use DTLS encryption built into the WebRTC protocol, ensuring end-to-end encryption of transferred files.
  • Secure WebSocket (WSS): Sync connections use the secure WebSocket protocol, encrypting data in transit.
  • Password Hashing: Pro account passwords are hashed using industry-standard algorithms before storage.
  • Access Controls: Strict access controls limit who can access server infrastructure and user data.
  • Regular Updates: We keep our software dependencies and infrastructure updated to address known security vulnerabilities.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

8. International Data Transfers

ClipboardSyncer is operated from India. If you are accessing our Service from outside India, please be aware that your information may be transferred to, stored, and processed in India and other countries where our service providers operate.

For users in the European Economic Area (EEA) or the United Kingdom, we ensure that any transfer of personal data to countries outside the EEA/UK is protected by appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Transfers to countries with an adequacy decision from the European Commission
  • Other legally recognized transfer mechanisms under applicable data protection law

By using our Service, you consent to the transfer of your information to India and other jurisdictions as described in this policy.

9. Data Retention

We retain different types of data for different periods, based on the purpose of collection and legal requirements:

  • Clipboard Data (localStorage): Retained on your device until you manually clear it, clear your browser data, or uninstall your browser. We have no control over this data's retention.
  • Sync Data (WebSocket): Retained only during the active sync session. Data is discarded immediately when the WebSocket connection closes. Typical retention: seconds to minutes.
  • File Transfer Data (WebRTC): Not retained at all. Data flows peer-to-peer and is not stored on any server.
  • Pro Account Data: Retained for the duration of your active subscription, plus 30 days after cancellation to allow for reactivation. After 30 days, account data is permanently deleted unless retention is required by law.
  • Payment Records: Transaction records are retained for 7 years as required by Indian tax and accounting regulations.
  • Contact Form Submissions: Retained for up to 12 months from the date of submission to allow for follow-up support.
  • Analytics Data: Retained for 26 months in accordance with Google Analytics default settings.
  • Server Access Logs: Automatically purged after 30 days.
  • Security/Abuse Logs: Retained for up to 90 days for security investigation purposes.

10. Your Rights

Depending on your location and applicable laws, you may have specific rights regarding your personal data. We are committed to honoring these rights.

10.1 Rights Under GDPR (EU/EEA Users)

If you are located in the European Economic Area or United Kingdom, you have the following rights under the General Data Protection Regulation:

  • Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you.
  • Right to Rectification (Article 16): You have the right to request correction of inaccurate personal data.
  • Right to Erasure (Article 17): You have the right to request deletion of your personal data ("right to be forgotten") when it is no longer necessary for the purpose it was collected.
  • Right to Restriction of Processing (Article 18): You have the right to request that we restrict the processing of your personal data in certain circumstances.
  • Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format.
  • Right to Object (Article 21): You have the right to object to processing based on legitimate interests, including profiling and direct marketing.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your EU member state.

10.2 Rights Under CCPA (California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

  • Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding 12 months.
  • Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to Opt-Out of Sale: You have the right to opt out of the "sale" of your personal information. We do not sell personal information in the traditional sense, but ad-related data sharing may constitute a "sale" under CCPA. You can opt out of personalized advertising through the mechanisms described in Section 5.3.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge different prices, or provide a different quality of service.

To exercise your CCPA rights, you or your authorized agent may submit a verifiable consumer request by contacting us using the information provided in Section 15.

10.3 Rights Under Indian IT Act

If you are located in India, you have rights under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011:

  • Right to Access: You have the right to access your personal data held by us and request information about how it is being processed.
  • Right to Correction: You have the right to request correction or amendment of inaccurate or deficient personal data.
  • Right to Withdraw Consent: You may withdraw consent for the collection and use of your sensitive personal data at any time. Please note that withdrawal of consent may affect your ability to use certain features of the Service.
  • Right to Grievance Redressal: You have the right to file a grievance with our Grievance Officer (contact details in Section 15).

10.4 How to Exercise Your Rights

Since most of our Service operates client-side, you can exercise many of your data rights independently:

  • Delete clipboard data: Use the Clear button in the app or clear your browser's localStorage
  • Stop sync: Simply disconnect from the sync session
  • Opt out of analytics: Use browser settings or the Google Analytics opt-out add-on
  • Opt out of personalized ads: Visit Google's Ad Settings page
  • Delete Pro account: Contact us to request account deletion

For rights that require our assistance, please contact us at [email protected]. We will respond to all legitimate requests within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.

11. Children's Privacy

Our Service is not directed to children under the age of 13 (or under the age of 16 in the European Economic Area). We do not knowingly collect personally identifiable information from children under these age thresholds in compliance with the Children's Online Privacy Protection Act (COPPA) and GDPR Article 8.

If we become aware that we have inadvertently collected personal information from a child under the applicable age threshold without verified parental consent, we will take immediate steps to delete that information from our systems.

If you are a parent or guardian and you believe your child has provided us with personal information, please contact us immediately at [email protected] so that we can take appropriate action.

12. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to websites. Due to the lack of a uniform standard for interpreting DNT signals, our website does not currently alter its practices when it receives a DNT signal from a visitor's browser.

However, we respect your privacy choices. You can opt out of tracking through the mechanisms described in Section 5 (Cookies and Tracking Technologies), including:

  • Using the Google Analytics opt-out browser add-on
  • Adjusting your Google Ad Settings for personalized advertising
  • Using browser privacy settings to block third-party cookies
  • Using privacy-focused browser extensions

We will continue to monitor industry developments regarding DNT standards and may update our practices accordingly.

13. Data Breach Notification

In the event of a data breach that affects your personal information, we are committed to:

  • Assessment: Promptly investigating the nature and scope of the breach.
  • Notification to Authorities: Notifying the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33, where the breach is likely to result in a risk to individual rights and freedoms.
  • Notification to Affected Users: Informing affected individuals without undue delay when the breach is likely to result in a high risk to their rights and freedoms, as required by GDPR Article 34.
  • Remediation: Taking immediate steps to contain the breach, mitigate its effects, and prevent future occurrences.
  • Documentation: Maintaining records of all breaches, including their effects and remedial actions taken.

Given that ClipboardSyncer stores minimal personal data server-side (no clipboard content is stored), the risk and impact of a potential data breach is significantly limited.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes to this policy:

  • We will update the "Last Updated" date at the top of this page
  • We will post the updated policy on this page
  • For material changes that significantly affect how we handle your personal data, we may provide additional notice via email (for Pro plan users) or a prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Service after any modifications constitutes acceptance of the updated Privacy Policy.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us through any of the following channels:

We aim to respond to all privacy-related inquiries within 30 days. For GDPR-related requests from EU/EEA residents, we will respond within the legally mandated timeframe.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.