Privacy and legal information

Privacy Policy

Effective date: 9 September 2026. Last updated: 9 September 2026. ClipboardX is operated by Denys Shulhin, an individual developer in Poland.

What this policy covers

This policy describes how ClipboardX processes information when you use the Android and Windows applications, this website, and related support services. ClipboardX is not specifically directed at children.

Information processed

ClipboardX processes device and account identifiers, device name/platform/version, public keys, pairing state, device presence and connection metadata, IP/network metadata processed by normal server and transport operation, quota and referral state, and technical logs needed to operate and protect the service.

ClipboardX syncs text and images between paired devices. Image content is encrypted in transit. The backend is a transient relay: it does not decode or permanently store transferred image content and has no offline image queue. Encrypted image originals and thumbnails may be kept in app-private local History storage.

Why we process it

We process this information to register and authenticate devices, create and maintain pairings, relay transfers, provide history and pause controls, enforce quotas and prevent abuse, send requested device wake notifications, provide support, and meet legal obligations. Where GDPR applies, these purposes rely as applicable on performance of a contract, legitimate interests in operating and securing the service, consent where required, and legal obligations.

Service providers and payments

Android push delivery uses Firebase Cloud Messaging. Google Play may process purchases, subscriptions and payment data. ClipboardX receives purchase tokens, product and entitlement/lifecycle information needed to validate and provide the purchased functionality; it does not receive your full payment-card details. Microsoft Store and Google Play may process store transactions under their own terms and privacy notices.

Usage analytics and diagnostics

ClipboardX may collect metadata for each logical transfer: transfer timestamps, Text or Image category, direction/platform category, outcome or normalized failure category, delivery timing/performance, and an image-size bucket. It is associated with the internal service account and may be used in aggregated usage analysis to operate ClipboardX, diagnose failures, monitor reliability and performance, understand feature adoption, improve the product, and protect service reliability and security where applicable. If a reliable country signal is available from trusted deployment context, only its ISO country code may be stored.

Analytics never includes clipboard text, transferred images, thumbnails, copied URLs or other clipboard content. Analytics data is not sold and is not used for targeted advertising. Detailed analytics are retained for up to 90 days, subject to deletion handling and applicable legal or operational requirements. Infrastructure providers or processors may process data as necessary to operate ClipboardX.

Retention and deletion

Image History remains local until removed through its normal lifecycle. Deleting applicable History removes its corresponding encrypted image blobs; disconnecting or unpairing follows the History-cleanup option shown in the app. Relay sessions and short-lived pairing requests are cleaned up by service processes. Account, device, transfer, quota and security metadata may be retained where necessary for operation, fraud prevention, accounting, disputes or legal obligations.

To request access, correction, erasure, restriction, objection, portability, or to ask about a deletion request, contact privacy@clipboardx.it.com. You may also complain to the competent data-protection authority.

Clipboard content is encrypted in transit and the backend is a transient relay, so ClipboardX may not possess or be able to decrypt transferred clipboard content and does not promise to provide content it never retained. When legally required, we may preserve or disclose information we actually possess or control, such as account and device data, timestamps, TransferIds, usage or quota data, billing records, security or server logs, and IP-related logs where retained. This does not create new content scanning, logging, or retention.

Security, changes and contact

ClipboardX uses authenticated devices and encrypted transport mechanisms. No security measure is absolute. We may update this policy and will publish the updated version here with a revised date. Privacy contact: privacy@clipboardx.it.com.