Privacy Policy
Effective: May 2026
safe-paste is built around a single design principle: the less of your data we touch, the less we have to lose. This page documents every byte that does cross a boundary, and the many that don't.
What the App does NOT collect (on your Mac)
- Clipboard content — ever, for any reason, in any form
- Files or folders you scan with the Services menu
- Detected secrets or their original values
- Screenshots, photos, PDFs, QR codes, or barcodes you redact
- Usage telemetry from inside the App (no in-app analytics by default)
What this Site does NOT collect
- IP addresses in raw form — hashed before any storage
- Behavioral cookies or any other client-side tracking identifier
- Fingerprinting (canvas, font, audio, WebGL)
- Mouse movement, scroll depth, or session recording
- Ad-tech identifiers (Facebook Pixel, Google Ads, etc.)
- Email beyond what you explicitly submit via the download or newsletter form
What this Site DOES collect
Email (only if you submit it)
When you request a download or subscribe to the newsletter, we store your email address in Cloudflare D1 (an SQLite database hosted on Cloudflare's edge). We also send a copy to Resend, our transactional email provider, so we can deliver the download link or welcome message.
Your email is used for:
- Sending you the download link you requested
- If you opted in: occasional notifications about security updates, new releases, or relevant supply-chain incidents
Your email is not shared with third parties, sold, or used for advertising. You can have it deleted any time by emailing privacy@safepaste.manolus.dev or by clicking the unsubscribe link in any email we send you.
Aggregate pageviews
We use Cloudflare Web Analytics (no cookies, no IP storage) and PostHog in cookieless mode (no cookies, no localStorage, in-memory only) to count pageviews and a small set of conversion events (download modal opened, email submitted, newsletter subscribed). Neither tool stores personal information or persists across browser sessions.
Download counts
For each download you complete, we increment a counter associated with your email. This helps us detect abuse (e.g. someone scripting thousands of requests). It does not feed any profile or advertising system.
Error reports
If the Site throws a JavaScript error, we send a stack trace to Sentry with personal identifiers scrubbed before send. This helps us fix bugs faster.
Data residency
Cloudflare D1 stores data in Cloudflare's distributed edge network. Region pinning to the European Union is available on request — email privacy@safepaste.manolus.dev. Resend operates from the European Union and the United States. Our PostHog tenant runs on the EU instance.
Retention
- Email addresses are kept until you unsubscribe or request deletion
- Hashed IP/UA in the consent log: 90 days, then purged
- Aggregate analytics: 12 months
- Error reports: 30 days
Your rights (GDPR, CCPA, LGPD)
You have the right to:
- Access the data we hold about you (email + consent timestamp)
- Correct it
- Have it deleted
- Object to processing
- Port it (we'll provide a JSON export)
- Withdraw consent at any time
All requests should be sent to privacy@safepaste.manolus.dev. We will respond within 30 days.
Sub-processors
The following services process your data on our behalf:
- Cloudflare — hosting (Workers), database (D1), token storage (KV), DMG hosting (R2), CDN, Web Analytics, Turnstile bot protection
- Resend — transactional + newsletter email delivery
- PostHog — cookieless event analytics
- Sentry — error tracking (PII-scrubbed)
All four publish DPAs (Data Processing Agreements) which we have on file. Available for your review on request.
Children
The Site and App are not directed to children under 13, and we do not knowingly collect data from them.
Changes to this Policy
We will update the "Effective" date at the top of this page when we make changes. Material changes (new data categories, new sub-processors) will be announced via the changelog at least 14 days before they take effect.
Contact
For any privacy question, write to privacy@safepaste.manolus.dev.