Privacy Policy
Last updated: September 25, 2026
shield Scope & Our Commitment
This policy describes how the NimblePaste macOS application handles information. Clipboard data stays on your Mac by default. NimblePaste has no user accounts, cloud clipboard database, sync service, advertising SDK, session recorder, or usage-analytics tracker.
The optional diagnostic-reporting feature is the only part of the app designed to send information over the network, and it is off by default.
database 1. Information Stored on Your Mac
- Clipboard content: Text, URLs, rich-text payloads, images, and Finder file references that NimblePaste captures are stored locally under the app's Application Support directory. The SQLite database stores searchable content and metadata; rich text and image payloads are stored as local files alongside it.
- Local metadata: A captured item may include its source app name and bundle identifier, capture and paste timestamps, paste count, favorites, content type, a content fingerprint used to deduplicate copies, and local Board, tag, and Queue relationships.
- Finder files: For files copied from Finder, NimblePaste stores the original path and a security-scoped bookmark so the file can be accessed later. It does not copy the file's contents into the app during capture.
- Local settings: Preferences such as excluded applications, retention limits, appearance, shortcuts, and your diagnostic-reporting choice are stored locally in macOS preferences.
Clipboard content and metadata stored locally on your Mac rely on macOS user account permissions and user-enabled disk encryption (such as macOS FileVault). NimblePaste does not apply independent proprietary encryption to its local SQLite database or cache files.
cloud_off 2. Optional Diagnostic Reporting
Crash & performance reporting is disabled by default. If you enable it in Settings, the choice takes effect after the next app launch. NimblePaste uses Sentry as its diagnostic-reporting provider to help identify crashes and performance problems.
- What may be sent: Crash exception and stack information, app and operating-system version, device and runtime details, event timestamps, SDK metadata, and sampled performance information. Sentry may also receive network connection metadata such as the submitting IP address, depending on the provider and project configuration.
- What NimblePaste does not intentionally add: Clipboard text, images, rich text, URLs, Board names, Queue labels, file contents, file paths, or your excluded-app list. NimblePaste removes event extras and breadcrumb data before sending, but diagnostic events can still contain ordinary crash metadata generated by the SDK.
- Purpose and recipient: This information is sent to Sentry solely to diagnose crashes and performance issues. Sentry processes it under its Privacy Policy and data-processing terms; it is not used by NimblePaste for advertising or behavioral analytics.
- Legal basis & international transfers: Where GDPR or UK GDPR applies, diagnostic telemetry is submitted based on your consent (Article 6(1)(a)), which you may withdraw at any time by toggling the setting off. Sentry (Functional Software, Inc.) identifies the EU-U.S. Data Privacy Framework, including its UK and Swiss extensions, and Standard Contractual Clauses as available transfer mechanisms. The mechanism and processing region applicable to this project depend on the Sentry account configuration and contractual terms. Diagnostic events are retained according to the Sentry project’s configured retention period; NimblePaste does not control Sentry’s default retention settings.
- Your data rights: Where applicable under data protection laws (such as the GDPR or UK GDPR), you may have the right to request access to, rectification of, or erasure of your personal data, restrict or object to its processing, request data portability, and lodge a complaint with your local data protection supervisory authority. Because NimblePaste operates without user accounts, fulfilling diagnostic deletion requests requires providing any relevant Sentry event ID or timestamp associated with your submission.
- Revoking consent: Turn the setting off and relaunch NimblePaste. Disabling the setting stops future reports from this installation after relaunch; it does not automatically erase reports already received by Sentry. To request deletion of a previously submitted diagnostic event, contact us with any available event ID and approximate submission date.
key 3. macOS Permissions & Sensitive Copies
NimblePaste requests macOS Accessibility permission only to dispatch a synthetic ⌘V keystroke to the active frontmost application when you select an item for direct pasting. It does not record keystrokes, track typing cadence, or monitor input outside its own utility window. Without this permission, selected content is written to the system pasteboard for manual pasting.
By default, copies from 1Password, Bitwarden, Dashlane, Enpass, KeePassXC, LastPass, NordPass, and ProtonPass are excluded from history capture. You can change that list in Settings. NimblePaste also skips pasteboard content marked transient, concealed, or automatically generated by the source application.
delete_sweep 4. Retention, Deletion & Backups
You can configure automatic cleanup by age and maximum item count, delete individual items, clear the Paste Queue, or clear History in Settings. Automatic retention preserves items that are favorited or saved to a Board. The Clear History flow can also remove those protected Board clips and the active Queue when you choose those options.
A user-initiated backup can contain History, Boards, the Paste Queue, local metadata, and rich-text or image payloads. Image files can be excluded during export. NimblePaste does not upload backups, but once you save, copy, or share a backup, its handling is controlled by you and the services or people you choose. Retention settings do not delete exported backup files.
language 5. Website Privacy
The NimblePaste marketing website does not use advertising or analytics trackers and does not provide an account or clipboard service. The site stores your light/dark theme choice in browser local storage. Fonts are self-hosted rather than loaded from Google Fonts, so no font request leaves your browser. Its pages still load the Tailwind runtime from a third-party CDN; that provider and the hosting service may receive standard request metadata such as your IP address, browser, and requested URL. This website-resource traffic is separate from the NimblePaste macOS app's clipboard handling.
We do not sell personal information, nor do we share personal information with third parties for cross-context behavioral advertising.
family_restroom 6. Children’s Privacy
NimblePaste is not directed to children under 13, and we do not knowingly collect personal information online from children under 13.
update 7. Changes to This Policy
We may update this policy when the app or its data practices change. We will post the revised policy with a new revision date. If we introduce a new category of data collection or a new third-party recipient, we will describe it here and provide additional notice where appropriate before the change takes effect.
mail 8. Contact Us
NimblePaste is developed and operated from California, United States. For privacy questions, deletion requests, or diagnostic-event requests, contact: