CopyCraft – Privacy Policy

Last updated: November 4, 2026

CopyCraft is a clipboard helper for the macOS menu bar. It is built to keep sensitive copied data on your Mac.

No data collection. CopyCraft collects no data. There are no accounts, no analytics, no tracking, no ads and no crash reports sent to me or to third parties.

No network. CopyCraft works fully offline. The app has no network permission (no network.client or network.server entitlement in the App Sandbox) and never opens a network connection. What you copy does not leave your Mac through CopyCraft.

Mac App Store. This page is also CopyCraft's privacy policy on the Mac App Store, where App Privacy says: Data Not Collected. Apple may process data through the App Store itself (such as downloads and purchases); Apple's privacy policy applies to that, and CopyCraft does not receive that data through the app.

From another device. When a copy comes over Universal Clipboard from your iPhone, iPad or another Mac, CopyCraft labels it From another device. The label is kept in memory only; it is never stored or logged, and CopyCraft makes no connection for it (macOS does the transfer itself).

Watch clipboard is off until you choose it. On the welcome screen you choose between two buttons, Watch clipboard and Not now; only a click stores your choice, and closing the window without one leaves it off. You can change it any time in Settings › Privacy. On, CopyCraft reads your copies on its own (every copy right away if you choose Always Allow when macOS asks about Paste from Other Apps, otherwise when you open the card) and keeps them in memory only. Off, CopyCraft works only with what you paste into it (⌘V in the card) or drop on it; the clipboard is then read only at the moment you press ⌘V. A choice you made (on or off) is kept, also after an update.

History in memory only. CopyCraft keeps what you paste or drop, and with Watch clipboard on also what you copy, in memory only. It is never written to disk and is gone as soon as you quit CopyCraft; the one exception is snippets (see below). Wipe, locking the screen, sleep and switching users clear it too, including a copy you just removed from history (kept for ⌘Z), also when history is empty; the history time limit forgets that copy as well. With Keep history (Settings › Privacy, under Watch clipboard, only active when it is on) CopyCraft forgets history 5, 15 (the default) or 60 minutes after the last copy, or only on Wipe when you choose Until Cleared. Copies a password manager marks private (the nspasteboard.org Concealed, Transient and AutoGenerated types) are not read and not kept, and recognized tokens and keys (for example GitHub, AWS or Slack tokens and private keys) are not added to history. An image goes into history right away; text recognition on your Mac then reads the text in it. When that recognized text contains such a token or key, CopyCraft takes the image out of history again (its data is overwritten and its tile in the strip goes away); the card still shows it. Until recognition is done, usually a few seconds and at most 30, such an image is briefly in history. When recognition fails, it stays in history. A private copy, Pause, an ignored app and a too-large image keep it out of history, as before. A long text (32 KB or more) goes into history only after it has been checked. The recognized text is never logged.

Clear sensitive copies after 60 s. When CopyCraft itself puts text or an image holding a credential, personal data or financial data on the clipboard, that copy gets the nspasteboard.org Concealed type, so other clipboard apps do not keep it. With Clear sensitive copies after 60 s on (on by default, Settings › Privacy) CopyCraft empties the clipboard 60 seconds later, unless you copied something else in the meantime.

Screenshots. With Take Screenshot… (menu bar, search or the hotkey, ⌃⌥4 by default) you pick an area, a window or the whole screen yourself; CopyCraft never takes a screenshot on its own. For this macOS asks once for Screen Recording permission (System Settings › Privacy & Security › Screen Recording); CopyCraft explains why first. The screenshot goes to the clipboard and, like other copies, into history in memory only (not into history while paused). Wipe, locking and quitting discard it; nothing is written to disk, unless you drag the thumbnail in the bottom-right corner somewhere yourself (that app then makes a file of it). If a token or key is on it, it stays out of history and the thumbnail goes at once. CopyCraft's own windows are left out by default (Settings › Privacy). The log only says that a screenshot was taken or why it failed, never what is on it, which apps or windows, or its size.

Notifications. CopyCraft can show a notification when an AI action or text recognition is done, on an error, or when possibly sensitive text was copied. These are local macOS notifications on your Mac itself, not push notifications over the internet. A notification never contains your text: no clipboard content, no AI result, no file name. macOS asks for permission first; you turn each kind on or off in Settings › General › Notifications, and all of them in System Settings › Notifications.

On-device AI. The AI features use Apple Intelligence (Apple's Foundation Models framework) and run on your Mac. No text is sent to a server. Without Apple Intelligence these features are unavailable.

What is stored locally. Your settings (such as the hotkey, language, privacy filter, notifications and ignored apps), in the standard macOS user defaults. They never contain clipboard content. Snippets you save (see Snippets). Any other file is written only when you choose to: with Save or Export diagnostics (that export holds the app and macOS versions, your settings and log lines, no clipboard content). When you ask CopyCraft to open a picture in Preview, it puts a temporary copy in the app's own temporary folder; that copy is overwritten and deleted on Wipe, lock, sleep and quit. When you drag a file from an app that only creates it on the drop (such as Mail), macOS writes it into a new folder in the app's temporary folder; CopyCraft deletes that folder with the file as soon as it has been read.

Snippets. A pinned text you save as a snippet yourself (⋯ › Save as Snippet…), with its name, is the only content CopyCraft keeps on disk: locally, in the app's own folder (Application Support/copycraft in its App Sandbox container), readable only by your user, and never with secrets. When the name or the text holds a recognized token, key or URL password, the snippet is not saved and CopyCraft says so; such a snippet found in the file is discarded at launch. Wipe, locking and quitting leave saved snippets in place; Unpin, Remove from History and Clear Pins also remove them from disk. History, other pinned items and what you type into a snippet are never stored.

Logs. CopyCraft writes only events to the macOS log (what happened, counts, sizes, types and errors), never clipboard or history text, file names, paths or AI input and output.

Email and links. Feedback through "Suggest a Feature…" or "Report a Problem…" opens a draft in your own mail app; you send it yourself, CopyCraft sends nothing. Links (such as this page) are opened in your default browser; the browser loads the page, not CopyCraft. This page is hosted on Cloudflare at heronlabs.app, without analytics, cookies or trackers; Cloudflare's privacy policy applies to the hosting.

Children. CopyCraft collects no data from anyone, including children.

Changes. If this policy changes, the new version is posted on this page with a new date.

Contact. Privacy questions: support@heronlabs.app.