How we handle your data

Who we are

SnipSync is a desktop clipboard-syncing application built by Vincent Jacobs ("we", "us", "our"). This policy explains what data we collect, why, and how we protect it.

What we collect

Account information

When you sign in with Google, we receive your email address, display name, and Google user ID. We use this to create and authenticate your SnipSync account. We do not receive or store your Google password.

Clip content

When you create a clip (paste text, type a note, save a link), the content is stored in our database so it can be synced to your other devices. When end-to-end encryption is enabled, clip content is encrypted on your device before being transmitted — our servers only store encrypted data that we cannot read. When encryption is not enabled, clip content is stored as readable text.

Device information

We store a device name (your computer's hostname) and platform (macOS or Windows) for each device you use SnipSync on. This helps you identify which device a clip came from. We also store a "last seen" timestamp to show device online status.

What we do NOT collect

• We do not read or monitor your system clipboard automatically. Clips are only created when you explicitly paste or type into the SnipSync app.
• We do not collect analytics, telemetry, or usage data.
• We do not use cookies or tracking pixels.
• We do not collect IP addresses for tracking purposes.

How we store your data

All data is stored in a Supabase hosted PostgreSQL database. Supabase provides:

• Encryption in transit — all connections use TLS/SSL.
• Row-level security (RLS) — database policies ensure you can only access your own clips and devices.
• Infrastructure — hosted on AWS with SOC2 Type II compliance.

SnipSync offers optional end-to-end encryption. When enabled, your clip content is encrypted on your device using XSalsa20-Poly1305 (NaCl) before being transmitted to our servers. The encryption key is derived from a vault password that you set — this password is never sent to our servers. We cannot read, access, or recover your encrypted clips. Only you hold the decryption key.

If end-to-end encryption is not enabled, clip content is stored as readable text in the database. We recommend enabling encryption for sensitive content.

How we use your data

Your data is used exclusively to provide the SnipSync service:

• Authenticating your identity
• Storing and syncing your clips across devices
• Displaying which devices are connected

We do not sell, rent, share, or monetize your data in any way. We do not use your data for advertising or profiling.

Third-party services

Both services have their own privacy policies. We encourage you to review them.

Data retention

Your clips and account data are stored indefinitely while your account is active. You can delete individual clips at any time through the app. To delete your entire account and all associated data, contact us at the email below.

Your rights

You have the right to:

• Access your data — all your clips are visible in the app.
• Delete your data — delete clips in-app, or request full account deletion.
• Export your data — contact us to request a data export.
• Withdraw consent — sign out and uninstall at any time.

Children's privacy

SnipSync is not intended for use by anyone under the age of 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, please contact us so we can delete it.

Changes to this policy

We may update this privacy policy from time to time. We will update the "Last updated" date at the top of this page. For significant changes, we will make reasonable efforts to notify users (e.g., via the app or this website).

Contact

Questions or requests about this policy? Reach out:

vincent@snipsync.xyz