Pastilo

Privacy Policy

Pastilo is a local-first clipboard app for Mac, iPhone, and iPad. This page explains what stays on your devices and what may be handled when you use Cloud Sync, in-app purchases, the website, support email, or checkout.

Last updated: October 2, 2026

EN · PL · DE

The short version

Pastilo does not send your clipboard history, app settings, usage analytics, crash reports, or diagnostic logs to us. Local history works without a Pastilo account. Entries you choose to send through optional iCloud are stored in your own iCloud account. Optional link thumbnails contact the linked website to load an image.

1. What Pastilo stores locally

Pastilo stores the information needed to provide its clipboard features, such as copied text, links, images, files, code, timestamps, tags, source-application details, notes, and your preferences. This data is kept in the app’s local storage on your Mac and is not uploaded to Pastilo.

Secure clipboard items use macOS-protected storage and can expire according to your settings. Pastilo does not receive or store your Touch ID or other biometric data.

You control local retention. Clear items or history in Pastilo, use the secure-item expiry controls, or remove the app’s local data when you uninstall it. Keep your own backup if the history is important to you.

On iPhone and iPad, the same kinds of data are kept in the app’s storage on your device and shared only with Pastilo’s Share Extension and keyboard on that device.

2. Network access

Pastilo does not make network requests to collect product usage. Optional iCloud transfers and link thumbnails are described below. To let you know about new releases, it may request a small update manifest from pastilo.app/update.json, at most once every 24 hours. This request sends no clipboard content, app settings, account identifier, analytics, crash reports, or diagnostic logs. As with any request to the website, the hosting provider may receive ordinary network metadata described in section 4. If the check fails, Pastilo’s local clipboard features continue to work.

When you activate, validate, or deactivate a trial or paid key, the app contacts the checkout and access provider with the key and the minimum activation information needed to answer that request. It does not send clipboard text, history, images, files, notes, or app settings as part of that exchange.

If you use Pastilo for Mac without activating a key, the Free edition does not need an account or a network connection to keep its local history working; offline, only the optional update check will be skipped.

Optional iCloud on Mac. Entries you send manually, or through automatic sending that you enable, are stored in the private database of your own Apple iCloud account using CloudKit. Local history and the iCloud list are separate by default. Automatic sending, receiving, and automatic import are separate controls. K2 Technology has no access to your private iCloud database.

3. iPhone and iPad app

Cloud Sync. If you buy Cloud Sync and turn it on, the entries you send are stored in the private database of your own iCloud account through Apple’s CloudKit and delivered to your other devices signed in to the same account. Apple processes this data under its own privacy policy; K2 Technology has no access to your iCloud private database. Automatic upload and automatic import are separate settings that you control.

Purchases. Cloud Sync plans are bought through the App Store with your Apple Account. Apple processes the payment, so we never receive your payment details. To confirm purchases and let you manage subscriptions, the app uses RevenueCat, Inc. as our service provider. While the app runs, it contacts RevenueCat to check whether Cloud Sync is active and sends a random app user ID created on your device, App Store transaction and subscription details, and technical information: app and operating-system version, device model, preferred languages, App Store country, Apple’s vendor identifier for our apps (IDFV), and your IP address as part of the connection. RevenueCat does not receive your clipboard content, and we do not use this information for advertising or cross-app tracking. See RevenueCat’s privacy policy.

Link thumbnails on Mac, iPhone, and iPad. When website preview images are enabled, Pastilo may contact the linked website when a link is added, when existing links are prepared for thumbnails, or when you open a link preview. The website receives ordinary request information such as your IP address. Thumbnail images can be cached locally on the device; Pastilo does not upload the thumbnails to iCloud. Turn the preview-image setting off to stop further thumbnail requests.

Keyboard and Share Extension. The Pastilo keyboard does not request Full Access, has no network access, and does not record what you type; it only reads the clips you choose to share with it. The Share Extension saves the items you share to your local history and, when Cloud Sync and automatic upload are on, queues them for upload.

4. Website and support

The Pastilo website is a static site. It contains no analytics, advertising pixels, session recording, or tracking scripts. Cloudflare provides DNS, security, and hosting; as part of delivering and protecting the site, Cloudflare may process ordinary request metadata such as an IP address, browser details, time, requested URL, and approximate country. See Cloudflare’s privacy policy for its handling and retention.

You choose the site language using the EN, PL, or DE links. The site does not automatically select a language based on your country or browser language.

If you email us, we receive the address, message, attachments, and any information included by your mail provider. For product support, write to support@pastilo.app; for privacy requests, use privacy@pastilo.app. Please do not send passwords, API keys, private clipboard history, or confidential files in a support request.

5. Checkout and purchases

Mac trial and paid checkouts are handled by Polar. Polar may process contact, payment, purchase, and access details under its own terms and privacy notice. Pastilo does not receive or store your full payment-card number. In-app purchases on iPhone and iPad are described in section 3.

We do not use checkout information to build an advertising profile. The app only uses the access response needed to enable or validate the edition you selected.

6. Your choices and rights

  • Use Pastilo’s clear, expiry, and secure-item controls to manage data stored on your Mac.
  • On Mac, do not enter a key if you want to keep the app entirely offline.
  • On iPhone and iPad, turn Cloud Sync, automatic upload, automatic import, and link preview images on or off in Settings, and delete cloud copies of entries from the app.
  • Contact privacy@pastilo.app to ask what personal information we hold from support, business correspondence, or in-app purchase records, or to request correction or deletion.
  • On Mac, control iCloud sending, receiving, automatic import, and link thumbnails in Settings. Turning off automatic sending does not remove entries already sent to iCloud.

Where the GDPR applies, you may also request access, restriction, portability, or object to processing where the law permits. Because Pastilo does not receive your local clipboard history, requests about that data are normally handled through the controls on your Mac. You may complain to the Polish Data Protection Authority (UODO).

7. Retention and security

Local clipboard data remains on your device until you delete it or it expires. Entries synced with Cloud Sync remain in your iCloud account until you delete them in Pastilo or iCloud. Support and business correspondence is kept only for as long as reasonably needed to respond, keep required records, or meet legal obligations. Apple, RevenueCat, checkout, and hosting providers set their own retention periods for the information they process.

Pastilo uses local storage and the security features of macOS, iOS, and iPadOS appropriate to the data it handles. No software or internet service can be guaranteed completely secure, so protect access to your devices and review what you copy.

8. Changes

If Pastilo’s data practices change, this page will be updated with a new date before the change takes effect where required. The current version is always available at pastilo.app/privacy.

9. Contact

K2 Technology
privacy@pastilo.app