Privacy Policy

Effective Date: May 13, 2026
Developer: Mr. Sane / SaneApps

SaneClip is built on a simple principle: your clipboard data belongs to you, and only you. This policy explains what stays local, when the app uses the network, and why.

1. What SaneClip Collects

Short answer: SaneClip does not send your clipboard contents or other personal content to SaneApps servers.

SaneClip stores clipboard history locally by default. Clipboard contents are never sent to SaneApps servers. The app can use the network for optional iCloud sync, update checks, and privacy-preserving aggregate operational counts such as trial or license status, whether an upgrade button was clicked, whether a license was activated, app version, build, and update status. Those counts do not include your clipboard contents, personal files, copied text, copied images, or synced clip data.

2. How Data Is Stored

Clipboard history is stored locally on your device in your Application Support directory by default. Optional iCloud sync and explicit export/share actions are the user-controlled paths that intentionally move clipboard content off-device.

• Location: Your clipboard history is stored in ~/Library/Application Support/SaneClip/ (direct download) or ~/Library/Containers/com.saneclip.app/Data/ (Mac App Store version, sandboxed).
• Encryption: SaneClip offers AES-GCM encryption at rest as an optional Pro setting. When enabled, your clipboard data is encrypted on disk and only decrypted when you access it.
• Widget and companion caches: Widgets and companion views use a small App Group cache for previews. When History Encryption or Touch ID lock is enabled, SaneClip clears that cache instead of keeping plaintext mirrored clips.
• Touch ID / Password Protection: When enabled, your clipboard history is locked behind biometric or password authentication. Even if someone gains physical access to your Mac, they cannot access your clipboard without authentication.
• Sensitive Data Auto-Detection: SaneClip automatically detects and purges passwords, credit card numbers, and other sensitive data using heuristics. Items flagged as sensitive are not saved to history.
• URL Tracking Parameter Stripping: When you copy URLs, SaneClip automatically removes common tracking parameters (e.g., utm_*, fbclid, gclid) to protect your privacy.

3. iCloud Sync (Optional)

SaneClip includes an optional iCloud sync feature powered by Apple's CKSyncEngine. If you enable this feature:

• Your clipboard history is synchronized across your Apple devices using iCloud CloudKit.
• SaneClip does not run a third-party clipboard sync server. Your synced data stays in your personal iCloud account.
• When History Encryption is enabled, synced clipboard content is encrypted before upload and decrypted only on your devices. In that mode, SaneApps cannot read your synced clipboard content, and Apple receives encrypted payloads rather than plaintext clipboard content.
• Without History Encryption, iCloud still uses Apple's transport and at-rest protections, but SaneClip does not represent that as app-level end-to-end encryption.
• Apple's privacy policy applies to iCloud infrastructure: apple.com/legal/privacy

iCloud sync is disabled by default. You must explicitly enable it in SaneClip settings.

4. Explicit Export And Share Actions

SaneClip can copy, paste, export, or share clipboard items when you choose those actions. Those actions are initiated by you and are separate from background app analytics.

5. Third Parties

SaneClip does not share, sell, or transmit your clipboard history to SaneApps servers. Clipboard content leaves your device only when you explicitly enable or initiate a feature meant to do that, such as iCloud sync, export, share, or paste. There are no advertising SDKs or behavioral ad networks embedded in the app.

The only exceptions are:

• Apple iCloud (if you enable sync) — governed by Apple's privacy policy.
• SaneApps distribution service — Receives privacy-preserving aggregate counts such as Free vs Pro launches, upgrade flow, license activation, app version, build, and update status. These do not include your clipboard contents.
• Cloudflare Web Analytics (website only) — The saneclip.com website may use cookie-free aggregate traffic stats, such as page views and referrers. This applies only to the website, not the app's clipboard data.

Neither SaneApps aggregate app counts nor website analytics include your clipboard contents, name, email, license key, advertising identifiers, or data for sale to advertisers or data brokers.

6. 100% Transparent Code

SaneClip is 100% transparent code under the PolyForm Shield license. You can audit the code yourself on GitHub:

github.com/sane-apps/SaneClip

If you find a privacy concern, please open an issue or contact me at [email protected].

7. Children's Privacy

SaneClip does not require an account or registration. The aggregate analytics described above are not used to identify children or anyone else.

8. Changes to This Policy

This privacy policy may be updated from time to time. When it changes, the "Effective Date" at the top of this page will be updated and users will be notified via the app's release notes.

Continued use of SaneClip after changes to this policy constitutes acceptance of the updated terms.

9. Contact

If you have questions about this privacy policy or SaneClip's data practices, please contact:

Email: [email protected]
GitHub: github.com/sane-apps/SaneClip/issues/new?template=bug_report.md
Developer: Mr. Sane / SaneApps