Privacy

Hotstash is built so your clipboard stays on your devices and in your own iCloud. This page lists everything the app sends anywhere, and why. Effective 18 October 2026.

Your clipboard history

Everything you copy is stored in a database on your device. If iCloud is on, it syncs to your other devices through your private iCloud database, which is part of your Apple Account. The developer can't see it.

On the Mac, copies that password managers mark as passwords or temporary are never saved, and you can exclude any app. On iPhone, Hotstash saves what's on the clipboard when you open the app or the Hotstash keyboard. On both, verification codes and one-time links are deleted 10 minutes after you copy them unless you keep them.

What the app sends to our server

An anonymous install count. When the app opens, it sends a random identifier created on your device, the platform, the app version, and the OS version. This counts how many installs are active. It isn't linked to your name, Apple Account, or clipboard.
Crash reports (Mac). After a crash, Apple's crash diagnostics for the app (where in the code it crashed, device model, OS version) are sent with the same random identifier, so bugs can be fixed. They contain no clipboard content.
AI transform writing (optional, Pro). If you ask Hotstash to write a transform, the description and example text you type are sent to our server and processed by our AI provider, Groq, to write it. Your purchase record is checked to confirm Pro, and the install identifier is used for the daily limit. Nothing else from your history is sent.
Transform marketplace (optional). Browsing loads public transforms. Publishing one requires an account with your email address.

The server is hosted by Supabase.

Other connections

Link titles. When you copy a web link, the app loads that page's title from the website itself, as a browser would.
Update checks. The app asks Apple's App Store service whether a newer version exists, and our server for update notices.
Purchases are handled by Apple. We never see your payment details.

iPhone keyboard and camera

The Hotstash keyboard needs Full Access only to read your history and Paste Stack from the app's shared storage and to see the latest copy. To suggest the right Paste Stack item it reads what type of field you're in (for example "email address"), never what you type. It logs no keystrokes and makes no network requests.

The camera is used only when you tap Scan Text. Text recognition happens on your iPhone, and nothing is recorded or uploaded.

What we don't do

No ads and no advertising or analytics SDKs.
No selling or sharing of data.
No reading of your clipboard history on our server.

Deleting your data

Delete items or clear history in the app; deletions sync to your other devices. To remove everything from iCloud, go to System Settings (or Settings on iPhone) → your name → iCloud → Manage Storage → Hotstash. To have the anonymous install record or a marketplace account removed, email us.

Children

Hotstash isn't directed at children under 13 and doesn't knowingly collect their information.

Changes and contact

If this policy changes, this page will show the new date. Questions: [email protected].