Política de privacidad de CoPanda

Last updated: October 6, 2026

The Short Version

Everything stays on your computer. CoPanda does not collect, transmit, or share any of your data. There’s no cloud, no accounts, no telemetry, no analytics, no tracking — nothing leaves your machine, ever.

“Everything local” is not a feature — it’s the foundation. It’s a technical fact you can verify yourself: the entire source code is open and public. Read the code, run a network monitor, check for yourself.

Our Privacy Philosophy: Everything Local

CoPanda was built with a privacy-first mindset from day one. This isn’t an afterthought or a feature — it’s a core design principle. Everything stays on your machine.

🔒 Local-only by design — Your data never leaves your computer
🚫 No telemetry — We don’t measure, track, or analyze your usage
🚫 No analytics — No Google Analytics, no App Insights, no Sentry, nothing
🚫 No accounts — No sign-up, no login, no user profiles
🚫 No cloud sync — Your clipboard history is yours alone
🚫 No automatic reporting — Errors are logged locally only; nothing is sent anywhere without your action
🔍 Fully auditable — Every line of code is open source under GPLv3

The data on your computer is yours. I built CoPanda to respect that boundary completely — not just in policy, but in code.

What Data Does CoPanda Store?

CoPanda monitors your system clipboard to maintain a local history. The following data is stored exclusively on your computer:

Clipboard Content

What	What’s Stored	Where
Content	The text you copied, its kind, and the formats it came with (small ones inline, larger ones as files)	`history.db`, `blobs/`
Images and other large data	The bytes of what you copied, stored once per distinct content	`blobs/`
Files and folders	Their paths; the files themselves stay where they are	`history.db`
Name and colour	What you named a card and the colour you gave it	`history.db`
Source app	The application the copy came from	`history.db`
Usage	When you copied it, when you last used it, how many times you pasted it, and whether it is pinned	`history.db`
Details	Dimensions, duration, size and similar facts read from what you copied	`history.db`
Text in pictures	The text the system read out of an image, so it can be searched	`history.db`
Thumbnails	Previews of images, video and audio	`thumbs/`
Settings	Your preferences	`config.toml`
Logs	Application events and errors, never what you copied	`logs/`

Everything lives in one folder: %LOCALAPPDATA%\CopyPaste\ on Windows and ~/Library/Application Support/CopyPaste/ on macOS.

These folders are protected by your operating system’s user account permissions. Other users on the same computer cannot access them under normal conditions.

What CoPanda Does NOT Do

To be absolutely clear:

❌ Does not send data to any server — No clipboard content, no metadata, no usage data
❌ Does not use cookies or tracking technologies
❌ Does not create user accounts or profiles
❌ Does not share data with third parties
❌ Does not use advertising or ad networks
❌ Does not send your data to any cloud AI — The text in your pictures is read on your machine, by the operating system itself (Windows OCR on Windows, Apple Vision on macOS)
❌ Does not sync across devices
❌ Does not upload crash reports — A crash is written to the local log beside the history, and sharing it is a file you attach yourself. Save a report… in About puts that log, the version and the system into one file, with your user name and home folder blanked out, wherever you choose
❌ Does not phone home — No background network calls except the update checker described below (all platforms)

Network Requests

CoPanda makes one type of network request for update checking:

Update Checker

Detail	Value
Purpose	Check whether a newer version of CoPanda is available
URL	`https://raw.githubusercontent.com/rgdevment/CopyPaste/manifest/release-manifest.json`
Method	`GET` (read-only)
Data sent	Standard HTTP headers only — no user data
Data received	A small JSON file naming the latest version (and the latest test version)
Frequency	At most once a day, when you open Settings → About, plus whenever you press «Check now»
Cached locally	Yes — the last answer is kept in `update.json`, next to your settings, so the app does not ask again within the day

Important notes:

This request is read-only — it downloads one small public file; no data is ever uploaded
No clipboard content, no usage data, no personal information is ever sent
There is no background polling: nothing is asked while you are not looking at Settings → About
Only when you press «Update» does the app also read latest.json (or candidate.json for test versions) from the same branch, which says where the installer lives and carries its signature
The installer is cryptographically signed, and the signature is verified against a public key built into the app before anything is installed. The download address is also checked against our own release hosts before a single byte is fetched
Microsoft Store version: nothing is checked and nothing is offered. The Store delivers its own updates
Homebrew (copanda, or copanda-beta for test versions): the same as a standalone build, «Update» downloads and installs it. The cask tells Homebrew that CoPanda updates itself, so brew upgrade --cask keeps working too
Standalone builds (Windows / macOS): if you press «Update», and only then, the installer is downloaded and run, and CoPanda restarts itself. Nothing is downloaded or installed without you asking for it

When you explicitly click one of the links in Settings → About, CoPanda opens it in your default browser:

Repository and Give it a star → https://github.com/rgdevment/CopyPaste
AlternativeTo → https://alternativeto.net/software/copypaste/about/
Privacy → https://github.com/rgdevment/CopyPaste/blob/main/PRIVACY.md
Sponsor the project → https://github.com/sponsors/rgdevment
Buy me a coffee → https://buymeacoffee.com/rgdevment
Rate it on the Store (Windows only) → opens the Microsoft Store app on CoPanda’s review page
Other tools → https://rgdevment.com/tisty/ and https://rgdevment.com/linkunbound/

The same goes for a link you open from a card in the panel. If LinkUnbound is installed, these web links go through it so it can pick the browser; otherwise they go straight to your default browser.

These are standard browser navigations initiated by your action — CoPanda does not make these requests itself.

Sensitive Data Protection

CoPanda includes built-in protections for sensitive content:

Concealed Content Exclusion

When an application marks what it copies as secret, CoPanda skips it entirely — the content is never hashed, never turned into an entry, never written to the database or to disk. This is how password managers keep their output out of clipboard history.

How It Works

Each platform has a standard marker that the copying application sets, and CoPanda checks for it before reading anything:

Platform	Marker it honours
Windows	`ExcludeClipboardContentFromMonitorProcessing`, or `CanIncludeInClipboardHistory` set to 0
macOS	`org.nspasteboard.ConcealedType` and `org.nspasteboard.TransientType`

The check asks only whether the marker is present, never for the secret’s contents, so its bytes are never requested in the first place.

What This Does Not Cover

The limits matter more than the promise, so plainly:

The marker is set by the other application, not by CoPanda. Whether a given password manager sets it depends on that application, its version and its own settings. Most major ones do. We do not publish a list of “supported” managers, because that would be a compatibility claim we cannot keep honest across every release of every one of them.
Content that merely looks sensitive is not detected. A password you type into a text file and copy carries no marker, so it is stored like any other text.
If you rely on this, verify it once with your own password manager: copy a credential and check that no entry appears in CoPanda. Ten seconds, and it tells you more than any list we could publish.

Windows Clipboard History

CoPanda operates independently from Windows’ built-in clipboard history (Win+V). Your CoPanda settings do not affect Windows clipboard behavior, and vice versa.

Backup and Restore

CoPanda can export a backup and restore from one. Both are manual actions you start yourself — nothing is backed up automatically, and no backup ever leaves your machine on its own.

What the Backup Contains

A backup is a single .cpbackup file: a SQLite database copied from your history, with the images and other stored data inside it.

Content	Included
Your entire clipboard history, pinned items included	Yes
Stored images and other data	Yes
Settings and configuration	No

This is deliberate — a backup that dropped your history would not be a backup. But it means the file is as sensitive as the history itself. On macOS the file is made readable and writable by your user only. You choose where it is written; treat it accordingly, and think twice before putting it in cloud storage or attaching it to a bug report.

Importing

Importing adds what the file holds to the history you already have. It never overwrites or deletes anything, and importing the same file twice does not duplicate anything.

Leftovers from CopyPaste 2

CopyPaste 2 could leave .pre-restore-<timestamp> folders in its data directory after an interrupted restore. CoPanda 3 never creates them. If you find one, it is a copy of your old history, and Delete CopyPaste 2’s data in Settings → Backup removes it along with the rest of the 2.x data.

Data Retention & Deletion

Automatic Cleanup

CoPanda automatically deletes unpinned items older than your configured retention period: 7, 30 or 90 days, or Forever (default: 30 days)
If you set a history size (256 MB, 512 MB or 1 GB), the oldest unpinned items go first once it is exceeded
Cleanup runs periodically in the background
Pinned items are preserved regardless of the retention setting

Manual Deletion

You can delete any clipboard item at any time: select it and press Delete on Windows or ⌘⌫ on a Mac, or use the bin on the card itself.

Emptying the History

Settings → History → Empty the history deletes everything you copied and keeps what you pinned. It cannot be undone, and nothing leaves your machine either way.

Complete Data Removal (Uninstall)

To completely remove all CoPanda data when uninstalling:

Windows:

Uninstall CoPanda (via Settings → Apps or the standalone uninstaller)
Delete the data folder: %LOCALAPPDATA%\CopyPaste\

macOS:

Move CoPanda to Trash from Applications
Delete the data folder: ~/Library/Application Support/CopyPaste/

After these steps, no CoPanda data remains on your system.

Children’s Privacy

CoPanda does not knowingly collect any personal information from anyone, including children under 13. The application does not collect personal information from any user — it has no accounts, no registration, and no data transmission.

Microsoft Store Distribution

CoPanda is available through the Microsoft Store. The Store version:

Follows the same privacy principles as the standalone version
Makes no update check at all — updates are delivered through the Microsoft Store
Uses MSIX packaging — installs/uninstalls cleanly with Windows standard mechanisms
Microsoft Store policies apply to distribution, but CoPanda itself does not share any data with Microsoft beyond what the Store platform requires for installation and updates

For Microsoft’s own privacy practices regarding the Store, refer to Microsoft’s Privacy Statement.

Open Source Transparency

The best privacy policy is one you can verify. CoPanda is 100% open source under the GNU General Public License v3.0:

📂 Full source code: github.com/rgdevment/CopyPaste
🔍 Audit the code yourself — every network request, every database write, every file operation
🐛 Report concerns — open an issue or email us

We encourage security researchers and privacy advocates to inspect the code. See our Security Policy for responsible disclosure guidelines.

Changes to This Policy

If we ever change this privacy policy, the changes will be:

Committed to the public repository with a clear commit message
Reflected in the “Last updated” date at the top
Documented in the release notes

Since CoPanda is open source, any change to privacy behavior would also be visible as a code change in the public repository before it reaches you.

Contact

If you have questions or concerns about this privacy policy:

📧 Email: github@apirest.cl
💬 GitHub Discussions: github.com/rgdevment/CopyPaste/discussions
🐛 Issues: github.com/rgdevment/CopyPaste/issues