Privacy: local history, permissions and purchases

App Store edition

The sandboxed App Store edition processes clipboard history, screenshots and OCR on your Mac. It does not send clipboard content, screenshots, OCR results, device identifiers or usage analytics to a ClipOrigin server, and includes no advertising or tracking SDK.

Apple handles the upfront App Store purchase under Apple’s privacy policy. This edition does not register a ClipOrigin trial, contact the website license service, require an activation code or connect to external AI clients. Screen capture requires Screen Recording permission. Pasting and scrolling capture are manual; this edition does not request Accessibility permission.

Optional image hosting is off until you configure a provider with your own credentials. When you explicitly upload an image, that image and the authentication information needed for the request are sent directly to your chosen provider (S3-compatible storage, Cloudflare R2, NodeImage or ImgBB). The provider processes that data under its own policy; ClipOrigin does not receive a server-side copy.

You can pause collection, exclude apps, set retention limits and delete local records within the app. If you contact support@cliporigin.app, we receive the email and information you choose to include so we can respond. Visiting the website is separate from using the app and follows the website measurement section below.

Clipboard and screenshot content

You can pause clipboard recording, exclude apps and set retention and storage limits. Screenshots can be saved to history and automatically copied, with those actions configurable separately.

The website demonstration uses authored English samples and public sample images. It does not read or write the visitor’s system clipboard. Screenshots in the demonstration do not come from a user’s personal clipboard history.

Optional translation of recognized text

Text recognition always runs on your Mac with Apple Vision. Translating the recognized text is a separate action available in ClipOrigin 1.28.0 and later. It starts only when you press Control–Option–Y or click Translate, and nothing is sent until you have chosen a translation service.

With Apple Intelligence selected, a supported Mac translates with Apple’s on-device model and the text stays on your Mac. With an OpenAI-compatible service, ClipOrigin sends the recognized text directly to the endpoint you configure, such as DeepSeek, Qwen, OpenAI, Google Gemini, OpenRouter or an Ollama server on your Mac, using your own API key. That provider processes the text under its own terms and privacy policy. ClipOrigin does not operate a translation server and does not receive a copy.

Your API key is stored in your Mac’s keychain and sent only to the endpoint you entered. Recognized text can contain personal or confidential information; review it before translating with a cloud service, or choose Apple Intelligence or a local Ollama model to keep it on your Mac.

Direct-download edition: macOS permissions

Screen capture requires the relevant macOS screen-recording permission. Accessibility permission supports interactions such as pasting into another application and automatic scrolling. Permissions can be reviewed in macOS System Settings.

Grant permissions for the features you intend to use. A permission prompt is not a grant of access to a remote AI service.

Direct-download edition: Optional AI connections

MCP connections to local clients are optional. Access to specified images, workspace writes and full history are separately authorized and checked on each subsequent tool call.

When you share content with a connected client, its further use depends on that client and its model service. Revoking ClipOrigin access prevents later authorized calls; it cannot retrieve a copy already shared.

Direct-download edition: Purchases, licenses and email

Waffo processes checkout. The ClipOrigin license service stores order, license and device-activation records needed to deliver purchases, enforce the device allowance and provide support. A secure purchase-session cookie authorizes access to the return page for 30 days.

After payment is verified, the service uses your Waffo checkout email to automatically send your key and activation steps through Cloudflare Email Service. You may also request a copy to another address. Recipient addresses, send attempts, provider message IDs and errors are stored for delivery and support. License emails are sent from send@cliporigin.app; replies go to support@cliporigin.app.

Trial registration and periodic license verification require internet access. These calls are separate from local clipboard storage. Contact support@cliporigin.app for questions about purchase or licensing records.

Optional website measurements

The website records page views, download and purchase clicks, and checkout errors with a random browser identifier. It stores only a public page path, language, and bounded campaign/source labels; it does not collect clipboard contents, images, full referrer URLs or search queries.

The browser identifier and first/last non-direct source expire after 30 days. Website event records are retained for 90 days. Checkout source summaries are retained with operational purchase records. Use the control below to stop optional collection. Clearing browser storage resets the identifier and any saved measurement preference; a later visit can start a new identifier unless measurements are disabled again or your browser sends Do Not Track or Global Privacy Control.

Payments and license delivery still require their existing transactional records and purchase-session cookies. Optional measurements can be missing or blocked and are never used to decide whether a license is valid.

Questions & answers

Website measurement choice

You can turn optional website measurements off in this browser. Downloads, checkout and licensing still work. We also respect Do Not Track and Global Privacy Control. This choice does not change the purchase-session cookie used to deliver your license.