Your clipboard is personal. Stowmark treats it that way.

01 · Local clipboard data

What you copy stays on the device by default.

Stowmark stores eligible copied content in its local application storage so it can show history, search it, favorite it, and paste it later. Images and files may use a local payload folder beside the history database.

Unless you enable sync, Stowmark does not send clipboard contents or content identifiers to its servers. It never sends copied file names, screenshots, search queries, paste targets, active-window titles, keystrokes, contacts, hardware serial numbers, MAC addresses, or continuous location. Clipboard content is never used for advertising or behavioral analytics.

02 · Optional encrypted sync

Cross-device history is a user choice.

The iPhone and iPad companion is designed around explicit Paste and Share actions; it does not silently monitor the system clipboard. If you create or sign in to a Stowmark account, you can sync eligible text clips between your Macs, iPhones, and the Stowmark web app. Clip text and per-clip source labels are sealed on your device before upload. The service stores ciphertext, a keyed content HMAC for encrypted deduplication, wrapped key material, account and session identifiers, and the session device name; it cannot decrypt clip text or recover your password. Images and files do not sync. Signing out leaves local clips on the device.

In the web app, your password, decrypted text, and unwrapped sync key stay in page memory. A derived authentication key and readable bearer token are held transiently and sent only to the sync API over HTTPS; none of these readable values are written to browser storage. To avoid creating a new device session every time you reopen the browser, it may retain your email, KDF parameters, wrapped sync key, and a bearer encrypted under your password-derived wrap key. Your password is required to unlock that record. Signing out revokes the server session and clears the saved record.

03 · Payments and licensing

Purchases never require a hardware fingerprint.

Stripe processes direct website payments for SVFF LLC. Stowmark receives identifiers and status needed to issue a receipt-bound license, provide billing support, prevent repeated trials, apply refunds, and keep access synchronized with subscription status. Stowmark does not receive or store your complete card number.

The license server signs entitlement data with an Ed25519 key. License keys, activation tokens, Stripe secrets, webhook secrets, encryption keys, and signing keys are not included in public website code or public download storage.

04 · Website and security logs

No advertising profiles or behavioral trackers.

The Stowmark website does not include advertising pixels or behavioral analytics. Hosting and security systems may process IP address, request time, requested path, browser information, response status, and abuse signals. The licensing service uses a keyed hash of network identifiers for short-lived rate limiting rather than keeping raw IP addresses in the licensing database.

05 · Service providers

Each provider has a narrow role.

These providers may process data in countries different from yours under their own security and legal obligations. Links to their notices are available from their respective services.

06 · Retention

Keep only what the service and law require.

• Billing, tax, refund, and accounting records: up to seven years.
• License and subscription records: while active, then up to two years for recovery and disputes.
• Activation records: until deactivated, revoked, or no longer needed for seat recovery.
• Sync account and encrypted clip records: while the account is active, then removed after a verified account-deletion request subject to security and legal retention.
• Encrypted post-purchase key delivery: up to 30 days, then removed when no longer needed.
• License audit and security events: normally 90 days, longer only for an active abuse or legal matter.
• Short-lived rate-limit entries: normally no more than 24 hours.
• Support correspondence: normally up to 24 months after the request closes.

07 · Your choices

Delete local history and control commercial access separately.

You may delete clips or clear local history in the app. You may deactivate a Mac to free a seat, cancel a direct subscription in the Stripe portal, or manage an App Store subscription through Apple. Deactivation and cancellation do not delete local clipboard history automatically.

Depending on where you live, you may request access, correction, deletion, restriction, portability, or an objection concerning personal data controlled by SVFF LLC. Some billing records must be retained for tax, fraud, accounting, or legal obligations.

08 · Security, children, and contact

Report a concern without sending clipboard content.

Stowmark uses HTTPS, signed entitlements, hashed license and activation credentials, server-side secrets, rate limits, and access-controlled operations. No system is perfectly secure. If you report a problem, do not include live license keys, payment details, Apple credentials, or private clipboard content.

Stowmark is not directed to children under 13 and does not knowingly collect their personal data. For a privacy request or security report, email info@svff.online. Material policy changes will be published here with a new effective date.