Privacy Policy for CacheBar

1. Introduction & Controller

We take your privacy very seriously. This Privacy Policy informs you about the processing of personal data in connection with the desktop application "CacheBar" (hereinafter "App").

The Data Controller responsible for the processing of data within the meaning of the General Data Protection Regulation (GDPR) is:

2. Scope & Categories of Processed Data

The App is a local-only clipboard management utility. When you run the App, it monitors and stores content copied to your macOS clipboard. Depending on what you copy, this data may include personal data or sensitive information such as text, passwords, private keys, contact details, links, or code snippets.

Monitoring only begins after you have confirmed the welcome screen described in Section 13. Content that matches your Private Filter, and content that other applications mark as concealed or temporary, is discarded before it is stored (see Section 12).

3. Purpose & Legal Basis of Processing (GDPR)

Any data processing is performed strictly on your local device. The developer has no access to this data.

• The processing of clipboard data is necessary to provide the App's clipboard history, pinning, and storage features at your request. The legal basis for this local processing is the performance of a contract (Art. 6(1)(b) GDPR).
• System settings and preferences are stored locally based on our legitimate interest in providing a functional, configurable application (Art. 6(1)(f) GDPR).

4. No Data Collection, Transmission, or Selling (CCPA/CPRA)

We do not collect, store, transmit, or share your clipboard data or settings on external servers. The App operates completely offline. We do not sell, rent, or lease any personal data, nor do we share it with third parties. Under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), this constitutes a complete "No Sale / No Share" policy.

5. App Store, Payments & Telemetry

The App is distributed through the Apple App Store, operated by Apple Distribution International Ltd. or Apple Inc. ("Apple"). Apple processes your store account, billing info, and downloads according to Apple's own privacy policy. CacheBar does not integrate any third-party analytics SDKs (such as Google Analytics or Firebase) inside the App. We only receive anonymous, aggregated crash reports and installation statistics from Apple if you have consented to share them.

6. Do Not Track (DNT) Signals (CalOPPA)

Pursuant to the California Online Privacy Protection Act (CalOPPA), we disclose that because the App does not collect user data or track your online activities across third-party websites or services, it does not track you and does not respond to "Do Not Track" (DNT) signals.

7. Children's Privacy (COPPA / GDPR)

The App is not directed at children under the age of 13 (or 16 in the EU/UK). We do not knowingly collect or process personal data from children. Since all data is stored strictly locally on your device, we have no access to it.

8. Data Security & Storage (iCloud / Time Machine)

All data is stored locally in a secure SwiftData SQLite database inside the App's macOS sandbox container. Access is restricted by macOS file permissions. Depending on your macOS settings, local containers may be backed up to your personal iCloud Drive or Time Machine backups. The security of these backups is governed by your Apple iCloud and system settings. Private Filter entries are the exception: they are not kept in this database but in the macOS Keychain, as described in Section 12.

9. Data Retention & Deletion

Your history size is limited to your preference (50 or 100 items). Once the limit is reached, older unpinned entries are automatically deleted. You can clear the entire history at any time using the "Clear History" button. Entries that match a newly added Private Filter entry are deleted immediately, including entries saved to your Space. Since all data is stored locally, deleting the App will permanently erase your stored history.

10. Your Rights under GDPR & CCPA

You have the right to access, rectify, delete, restrict processing, or export your data. Because we do not collect or store any of your data on external servers, we cannot access, retrieve, or delete it for you. You can exercise all of your rights directly on your device by copying, editing, or deleting entries in the App, or by deleting the App.

11. Right to Lodge a Complaint with a Supervisory Authority (GDPR Art. 77)

Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data relating to you infringes data protection laws. The competent authority for the developer's place of business is:

12. Private Filter, Concealed Content & Biometric Protection

The App provides a "Private Filter": a list of texts (for example passwords, keys or account numbers) that must never enter the clipboard history.

• Storage: Entries you add are stored exclusively in the macOS Keychain of your device. They are marked as available only while the device is unlocked and as non-syncing ("this device only"), which means they are not written to the App's database, not written to plain configuration files, and not transferred to any server or to another device by the App.
• Biometric access: Viewing, adding, or deleting entries requires verification via Touch ID or, on Macs without a biometric sensor, your macOS account password. This verification is performed entirely by macOS through Apple's LocalAuthentication framework. The App only receives the result (successful / not successful). The App and the developer have no access to your fingerprint or to any other biometric data, and no biometric data is stored or processed by the App.
• Effect: Clipboard content containing one of your entries (case-insensitive) is discarded immediately and is never written to the database. Existing entries that match a newly added filter are deleted automatically.
• Concealed content: Independently of your own list, the App by default ignores clipboard content that other applications, in particular password managers, mark as concealed, transient, or auto-generated using the common pasteboard markers (for example "org.nspasteboard.ConcealedType"). This behaviour can be switched off inside the Private Filter settings.
• Limitations: The filter can only act on markers set by other apps and on the text you entered yourself. It is a convenience feature and cannot guarantee that every sensitive item is recognised. You remain responsible for the content you copy, including credentials and other sensitive data.

13. Your Confirmation Before Processing (Onboarding)

On first launch — and again after material changes to this Privacy Policy — the App shows a short welcome screen on which you must confirm that you have read this Privacy Policy. Until you confirm, the App does not read or store any clipboard content.

Your confirmation, the date of the confirmation, and the version of the policy are recorded locally in the App's settings (macOS user defaults) and are not transmitted. Because all processing takes place locally and no data reaches the developer, this confirmation serves transparency purposes under Art. 12 and 13 GDPR; it is not a consent within the meaning of Art. 6(1)(a) GDPR.

14. Effective Date & Changes to this Policy

This Privacy Policy is effective as of July 19, 2026 and replaces the version of June 25, 2026. We may update this policy from time to time. Updates will be bundled with App releases and updated directly inside this document.