Privacy

Pasta is a clipboard manager for Mac. What you copy is personal, so this page says plainly what Pasta collects, where it goes, and how to delete it. Pasta is made by Automatique, Inc. ("we"). Questions: support@copypasta.info.

The short version

• Your clipboard history is yours. We don't sell it, use it for ads, or train AI models on it.
• Passwords, API keys and tokens are detected on your Mac and never leave it. Copies from 1Password, LastPass, Bitwarden and KeePassXC aren't captured at all.
• Everything that syncs is encrypted on your Mac before it's sent, with a key that belongs to your account.
• To label your copies, the text of an item is sent to our server and to the AI model that labels it. It isn't stored or logged in readable form there. Search runs entirely on your Mac.
• You can delete your synced data at any time from the app.

What Pasta collects

Your clipboard history

Pasta saves what you copy (text, links, images and files) on your Mac. When you're signed in, it also syncs your history to your other Macs: each item is encrypted on your Mac with AES-256-GCM before upload and stored only as encrypted data with Google Firebase and Google Cloud Storage. Your account's key is protected by Google Cloud Key Management Service. This is encryption at rest, not end-to-end encryption: our server can unlock your key while it's working for you, for example to label a new copy.

Labels

To label an item, our server sends the item's text (up to the first 4,000 characters), and for links the page title and description, to an AI model (Jev by TypeSafe AI, reached through OpenRouter). Our server doesn't store or log this text; we keep only counts and costs per month. OpenRouter and TypeSafe process it under their own terms. Detected secrets are never sent. Searching your history happens on your Mac; nothing you search for is sent anywhere.

Smarter search

On Apple silicon Macs, Smarter Search is on by default. Pasta downloads a search model from Hugging Face once, in the background after setup. That download is the only network request it makes, and it sends nothing about you or what you copy. The model runs on your Mac, and the index it builds stays there; it isn't synced. You can turn it off and delete both in Settings.

Image labels (optional)

If you turn on Label Images in Settings, Pasta sends a small copy of each image you copy afterwards (at most 1,024 pixels wide), encrypted, to our server, which asks the same AI model what kind of image it is (a receipt, a chart, code, a chat, a photo) and whether it shows a password or key. We keep only the label, never the image. Pasta first reads the text in each image on your computer and doesn't send images whose text looks like a password or key. If the model sees one anyway, we delete the item from our servers and Pasta locks it on your Mac. It's off unless you turn it on.

Link previews

When you copy a link, our server fetches that page to show its title and preview. The website sees a request from our server.

Your account

Your email address, and your name and photo if you sign in with Google, held by Firebase Authentication.

Billing

Payments are handled by Polar (polar.sh), our reseller and merchant of record. Polar collects your payment details, email and country; we never see your card. We store your subscription status, plan and renewal date, and the date your free trial started.

Usage statistics

The app sends anonymous counts and labels (for example "a link was pasted") with a random install id, so we can see which features get used. They go through our server, so PostHog never sees your IP address. Never what you copied, links, searches, or your account, and nothing that ties your install to your visit to our website.

Error reports

When something goes wrong in the app, it sends an anonymous error report the same way: the kind of error and where in Pasta's own code it happened (function names, our file names and line numbers), plus whether the app froze or quit unexpectedly. Never the error's message, because messages can quote what the app was handling, and never what you copied, file names or paths on your Mac, links, or a copy of the app's memory.

Website

copypasta.info doesn't use cookies or advertising. To see how people find Pasta, the site sends our server anonymous page visits and downloads. Our server passes them to PostHog with your IP address, so PostHog can estimate your approximate location; PostHog doesn't store the address, and there's no cookie or identifier. The app sends no IP address with its statistics. Our hosting keeps standard request logs for a short time.

Who we share it with

Only the services that run Pasta, for the purposes above:

• Google (Firebase and Google Cloud): sign-in, encrypted storage, key management.
• Heroku (Salesforce): hosts our server.
• OpenRouter and TypeSafe AI: labeling and search.
• Polar and its payment processor: checkout and billing.
• Hugging Face: hosts the Smarter Search model your Mac downloads (it receives the download request, not your data).
• PostHog: anonymous usage statistics and error reports.

We share data with authorities only when the law requires it.

How long we keep it

Synced items stay until you delete them or they pass the history retention you choose in Settings. Account and billing records stay while your account exists and as long as tax law requires afterwards.

Your choices and rights

• Delete history: delete items in the app, or Settings → Storage → Clear History (this Mac, our server and your other Macs).
• Delete synced data: Settings → Account → Delete Synced Data removes every synced item and your key.
• Delete your account: Settings → Account → Delete Account cancels your subscription, deletes your synced data, key and sign-in, and clears your history on that Mac. Or email support@copypasta.info from your account address.
• Access or export: email us and we'll help.

Depending on where you live (for example the EU, UK or California), you may have further rights, such as to access, correct, delete or move your data, or to object to processing. Email us to use them. We don't sell or share personal information for cross-context advertising.

Children

Pasta isn't meant for children under 13, and we don't knowingly collect their data.

Changes

If we change this policy in a way that matters, we'll update the date above and tell you in the app or by email first.