privacy policy

extendo is a clipboard history manager that runs on your Mac, with an optional iPhone companion. Your privacy is simple to explain because I have no access to your data — even when you turn on iCloud sync.

data collection

extendo does not collect, store, or transmit personal data to me or to any server I operate. There are no analytics, crash reports, telemetry, or update checks.

iCloud sync (optional)

iCloud sync is off by default and is the only feature in extendo that touches the network. When you turn it on, clipboard items are sealed on your Mac with a 256-bit AES-GCM key before they ever leave the device, then written to your iCloud private database as ciphertext.

The encryption key is generated on your Mac and stored only in that device's local Keychain. To read the same clipboard on your iPhone, you pair the two devices with a one-time 6-digit code shown in extendo's settings; the iPhone uses the code to unwrap a copy of the key and stores it in its own local Keychain. CloudKit only ever sees ciphertext, so neither the iCloud service nor I can read the items. The trade-off is that the key never leaves your devices — if you lose every paired device, the encrypted history is unrecoverable.

Sync covers text and rich text only. Images and files never leave your Mac. Items that match on-device heuristics for secrets (API keys, JWTs, one-time codes, credit cards, and similar) are filtered out before upload unless you explicitly opt in to syncing them.

iCloud's handling of the data the app uploads is governed by the iCloud privacy policy. Turning the toggle off stops new uploads; deleting items locally issues delete records to your iCloud zone on next sync.

network access (with sync off)

With iCloud sync disabled, extendo makes no network requests. The app does not connect to the internet at all.

system permissions

extendo asks for no system permissions on launch. Global keyboard shortcuts (⌘⌥V and ⌘⌥1 through ⌘⌥0) are registered through Carbon's RegisterEventHotKey, which delivers events to the app directly and does not require Input Monitoring, Accessibility, or any other privacy permission. Selecting an item from the popup copies it to the system clipboard; you press ⌘V to paste, as in any standard clipboard manager.

third parties

extendo includes no third-party SDKs, frameworks, or services. It is distributed through the Mac App Store and as a standalone DMG.

If you purchase extendo through Gumroad, Gumroad handles the payment and their privacy policy applies to that transaction. extendo itself does not receive any personal data from the purchase.

changes

If this policy changes, the updated version will be posted here. Since extendo collects no data, meaningful changes are unlikely.

contact

Questions about this policy can be directed to t@poob.me.