Privacy Policy
Your clipboard contents are encrypted in your browser and the relay server cannot read them. This site also runs Google Analytics and Google AdSense, which can — like any third-party tag — see the pages they run on. Both halves of that are true and this page says where the line falls.
Last updated 8 August 2026.
What the service itself collects
Nothing that identifies you, and nothing that can be read. There is no account, no email address, no password and no profile. What you copy is encrypted in your own browser with AES-GCM before it leaves the machine, using a key derived from the short session key you type. That key is never sent anywhere. The relay sees only a hash that tells it which room to route a message to, and ciphertext it has no way to open.
Messages are held in memory for the moment it takes to pass them on and are not written to disk. Files never reach the server at all — they travel directly between your devices over WebRTC. Closing the tab ends the session.
The relay records aggregate counts by country for the activity globe on the home page. That is a total per country and nothing else: no addresses, no session keys, no record of which devices are paired.
What is stored on your own device
Settings and clipboard history are kept in your browser's local storage,
on your device, under a realtimeclipboard. prefix. They are
never uploaded. Clearing site data removes them.
Google Analytics
This site uses Google Analytics 4 to count visits and see which pages people reach. It sets cookies and reports the page address, referrer, approximate location, device and browser to Google.
The page address it reports never includes the part after the
#. That matters here more than on most sites: in the
app, the session key lives in that fragment, so the analytics tag is
configured to strip it before anything is sent. Google does not receive
session keys through Analytics.
Google AdSense
Ads on this site are served by Google AdSense. Google and its partners use cookies and similar technologies to serve and measure ads, and may personalise them based on your prior visits to this and other sites. You can review and change your ad settings at My Ad Center, and opt out of personalised advertising at Google's ad settings.
An ad tag is third-party code that runs inside the page it appears on,
and it can read that page — including the address bar. On
/app.html, the address bar contains your session key.
Unlike Analytics, AdSense provides no supported way to withhold it. If
that is not a trade you want to make, use the app with an ad blocker,
or run the relay and the site yourself from the
source,
where these tags are switched off by default. It does not affect
encryption: the relay still cannot read your clipboard either way.
Consent
If you are in the EEA, the UK or Switzerland, a consent dialog appears before any advertising or analytics cookie is set, and everything stays off until you choose. You can reopen it at any time from the Privacy & cookie settings link in the page footer to change or withdraw what you agreed to.
Children
This service is not directed at children under 13 and does not knowingly collect information from them.
Your rights
Because there is no account and no server-side record of you, there is normally nothing to export or delete on request — the material a service would usually hold about you does not exist here. For the analytics and advertising data Google holds, use the Google links above, which reach further than any request to this site could.
Changes
Changes are published on this page with the date above. The site is open source, so the full history of what this policy said and when is in the repository.
Contact
Open an issue on GitHub. Do not include your session key in one.