Privacy Policy

Last updated: April 9, 2026

This privacy policy explains how ClipBear ("the App") and the ClipBear website ("the Website") handle your data. We believe in transparency and minimal data collection.

1. Who We Are

ClipBear is operated by ByteZoo Labs UG (haftungsbeschränkt), Domenica-Niehoff-Twiete 2, 22765 Hamburg, Germany ("we", "us").

For questions about this policy, contact us at: [email protected]

2. What ClipBear Does With Your Data

ClipBear processes all data locally on your device. Clipboard content, images, OCR results, and text processed by the LLM feature never leave your Mac. All AI processing is performed using Apple's on-device Foundation Models. We have no access to any content you process with the App.

2.1 License Verification

The only network connection the App makes is a license check to verify your purchase. This sends the following data to our server (hosted on Cloudflare):

  • Your license key
  • A hardware-derived device identifier (used to bind the license to your machine)

Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) — this is necessary to provide you with the licensed software.

Retention: License and device identifier data is stored for as long as your license is active. If you request deletion, we will remove it within 30 days.

Sub-processor: Cloudflare, Inc. (USA). Cloudflare processes requests to our API and may temporarily log IP addresses in accordance with their own privacy policy. Data transfers to the USA are covered by Cloudflare's EU Standard Contractual Clauses. See: https://www.cloudflare.com/privacypolicy/

2.2 Anonymous Usage Ping

To understand how many devices actively use ClipBear, the App sends a single anonymous ping when launched (at most once per day). This ping contains only:

  • Your hardware-derived device identifier (the same SHA-256 hash used for license verification — not your serial number or any other device detail)
  • The app version number

This data is stored in Cloudflare Analytics Engine with automatic 90-day retention. It is used solely to count unique active installations. We do not track feature usage, session duration, clipboard content, or any other behavioral data.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — we have a minimal, proportionate interest in understanding how many people use our software to inform product decisions.

Retention: Data points are automatically deleted after 90 days by Cloudflare Analytics Engine.

3. Purchases & Payments

Purchases of ClipBear are processed by Paddle.com Market Ltd (UK) as Merchant of Record. Paddle handles all payment processing, invoicing, VAT, and refunds. When you make a purchase, Paddle collects your payment details, email address, and billing information directly — we do not receive or store your payment details.

Paddle is the data controller for all payment-related data. Their privacy policy is available at: https://www.paddle.com/legal/privacy

After your purchase, we send you a one-time confirmation email containing your license key. This email is triggered by a Cloudflare webhook and delivered via Resend (an email delivery service). Your email address is provided by Paddle for this sole purpose — we do not store your email address and do not use it for any other communication.

4. Website Analytics

Our website uses Cloudflare Web Analytics to understand aggregate page visits and performance (for example page views, referrers, country-level location, device type, and Core Web Vitals). This service is provided by Cloudflare, Inc. and does not use cookies or local storage for tracking. We do not receive personally identifiable information from this analytics. We process this data based on our legitimate interest in operating and improving the website. For more information, see Cloudflare Web Analytics and Cloudflare's privacy policy.

5. What We Do NOT Collect

To be explicit:

  • We do not collect clipboard content, images, or text you process with the App
  • We do not use tracking cookies or advertising pixels
  • We do not collect behavioral analytics, feature usage, or session data from the App (see Section 2.2 for the anonymous install counter)
  • We do not require an account or registration
  • We do not operate a newsletter or mailing list
  • We do not sell, share, or transfer your data to third parties for marketing purposes

6. Your Rights Under GDPR

As an EU resident, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Delete your data ("right to be forgotten")
  • Restrict processing of your data
  • Data portability — receive your data in a structured, machine-readable format
  • Object to processing of your data
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

7. Data Transfers Outside the EU/EEA

Our license verification API is hosted on Cloudflare, which may process data in the USA. This transfer is safeguarded by EU Standard Contractual Clauses. Paddle may also process data outside the EEA under equivalent safeguards — see their privacy policy for details.

8. Data Security

License verification data is transmitted over HTTPS (TLS encryption). We use Cloudflare's infrastructure, which provides enterprise-grade security measures including DDoS protection and encrypted storage.

9. Changes to This Policy

If we make material changes to this policy, we will update the "Last updated" date at the top. For significant changes, we may notify you through the App or on our website.

10. Contact

ByteZoo Labs UG (haftungsbeschränkt)
Domenica-Niehoff-Twiete 2
22765 Hamburg, Germany
Email: [email protected]