Privacy policy
What MyClipCloud collects, why, how long it is kept, and your choices.
Last updated: 19 October 2026
Who we are
MyClipCloud is operated by [operator legal name], [postal address]. Contact: the contact form or [privacy contact email].
What we collect
| Data | Why | How long |
|---|---|---|
| Google account identifier, email, name, profile photo URL (if you use Google sign-in) | To create and secure your account | Until you delete your account |
| Email, name and a one-way password hash (bcrypt) if you sign up with email; single-use confirmation/reset links (stored hashed) | To create and secure your account and let you reset your password | Until you delete your account; links expire within 24 hours |
| Text you copy in MyClipCloud, and text on your device clipboard when you return to an open MyClipCloud tab (only in browsers where you allowed clipboard access; on by default, can be paused or turned off) | To deliver it to your devices | Your retention setting (1, 7 or 30 days; default 7) unless pinned; removed on deletion |
Notes you write in MyNotes (mynotes.myclipcloud.com): titles, text, checklists, labels, reminder times and images you add, encrypted at rest | To keep your notes and remind you | Until you delete them; notes in the trash are deleted after 7 days; removed when you delete your account. Notes you write without signing in stay in your browser and are never sent to us. |
| Device names (e.g. "Chrome on Windows") and last-seen times | To show and manage your devices | Until removed, plus up to 30 days |
| Security log (sign-ins, setting changes, hashed IP) | To protect your account | 180 days |
| Contact form messages | To answer you | As long as needed to handle the request |
The website does not read your device clipboard in the background or capture copies made outside MyClipCloud, unless you install the optional browser extension described below. We never use your content for advertising.
Browser extension (optional)
If you install the MyClipCloud extension from the Chrome Web Store (Chrome, or Edge) and click Connect, it syncs your clipboard while the browser is running, even with no MyClipCloud tab open:
- It reads text and images you copy on that computer and sends them to your own MyClipCloud account, and it puts text from your other devices on that computer's clipboard. The data is stored and kept exactly like other clipboard items (see the table above).
- Nothing is sent while automatic sync is paused or off for your account, or while sending is switched off in the extension. Text that looks like a password, key, card number or one-time code is not sent.
- On your computer the extension keeps only a connection token, its sync position, your on/off switches and a one-way fingerprint (SHA-256) of the last copy, never the copied content itself.
- It talks only to myclipcloud.com. It does not read your browsing history, tabs or other websites.
- The connection appears under Devices as, for example, "Chrome extension on Windows". Removing it there, or choosing Disconnect in the extension, stops it immediately. Its access ends by itself after 90 days unless you connect again.
Where data is stored
Data is stored with [hosting provider] in [region/country]. Clipboard content and notes are encrypted at rest; the service holds the keys (server-side encryption, not end-to-end).
Signing in
With Google: Google tells us your account identifier, email, name and profile photo. We do not receive your Google password and we do not keep Google access tokens.
With email and password: we store only a one-way hash of your password, never the password itself. We email you to confirm your address and when your password changes. If you later sign in with Google using the same confirmed email, the two sign-in methods are connected to one account.
Cookies
We use only strictly necessary cookies. See the cookie policy.
Speed and traffic statistics
To keep MyClipCloud fast and to understand how it is used, each page sends us one small anonymous report when you leave it: which page, the site you came from (its name only), whether you use a phone or computer, your browser and system family, how quickly the page loaded and reacted, how long our server took to answer, and counters such as “connected to a nearby device directly”. We never record what you type, copy, send or receive.
We use no analytics cookies and no third-party analytics. We do not store your IP address: to count visitors we keep a short code made from your network address, browser and the date, which changes every day, so you cannot be followed from one day to the next. A random code that only lasts while the tab is open groups the pages of one visit. If your browser sends “do not track” (Global Privacy Control), no report is sent. Reports are kept for 90 days.
Nearby (no account)
On the home page and /nearby you can use MyClipCloud without an account between devices on the same network. We set a mcc_guest cookie (24 hours) with a random identifier and show other devices on your network a random name (e.g. “Blue Fox”) and your browser and system (e.g. “Chrome on Windows”). To group devices by network we keep only a keyed hash of your network address, which changes daily — never the address itself. Opening the home page starts this automatically, so other devices on your network see you listed; choose Hide me to stop (this browser remembers it).
Nothing is exchanged until the other device accepts or a 6-digit code is used. Content then goes directly between the two browsers (encrypted by WebRTC); to set that up, your browser contacts Google's STUN service, which sees your public IP address as in any video call. If a direct connection isn't possible, items pass through our server encrypted, are deleted once delivered or after 10 minutes, and files are checked for malware. Guest items are not stored in any history; idle guest records are deleted after 24 hours.
Sharing
We do not sell your data. We share it only with the infrastructure providers that run the service, and when required by law.
Your rights and choices
- Turn automatic sync off or pause it at any time (this also applies to the browser extension).
- Delete items, clear your history, or export your data as JSON from the app.
- Delete your account permanently from Profile.
- Depending on where you live, you may have further rights (access, correction, objection, complaint to a regulator). [Operator to list applicable rights and regulator.]
Text already copied onto a device's own clipboard stays there until that device replaces it; no website can erase it remotely. Backups are kept for [backup retention period] and then overwritten.
Changes
We will update this page when our practices change and adjust the date above.