Does Copydrop upload my clipboard to the cloud?

No. Your clipboard history is a local SQLite database in your Library folder. Copied content is never uploaded, synced, or transmitted anywhere. There is no account and no clipboard sync.

What network connections does Copydrop make?

Only two, and neither involves your clipboard: a license check with our payments provider Polar when you activate or re-verify a key, and an app-update check via Sparkle. The Mac App Store build has no Sparkle. Your copied content is never part of any request.

Are my passwords saved in the clipboard history?

No. Anything a password manager marks as concealed is never captured, following the nspasteboard.org conventions. You can also exclude any other app with one click.

← copydrop.app

Copydrop security, in plain terms

Q: Is Copydrop notarized by Apple?

Yes. Copydrop is signed with a Developer ID (Jakub Had, Team 3T64KN86GN), built with the hardened runtime, and notarized by Apple with the ticket stapled to the download. You can confirm it with spctl and stapler in Terminal.

A clipboard manager sees the most sensitive text on your Mac — passwords you paste, private messages, API keys. So the honest thing is not to ask you to trust us, but to show you exactly what Copydrop does and how to check it yourself.

The short version

Your copied content never leaves your Mac. It lives in a local database and is never uploaded, synced, or sent anywhere. There is no account and no clipboard sync.

The app is signed and notarized by Apple, built with the hardened runtime. Every claim on this page is one you can verify in Terminal in under a minute.

Your clipboard stays on your Mac

Everything Copydrop captures is stored in a single SQLite database inside your ~/Library folder, with attachments (images, files) next to it. That database is read and written only on your machine. Copied content is never part of any network request — there is no server of ours for it to go to.

No account to create, no cloud to opt out of, no telemetry, no analytics SDK. The app cannot silently "phone home" with your clipboard because the code to send it simply does not exist.

Signed and notarized by Apple

The download is signed with a Developer ID — Jakub Had, Team 3T64KN86GN — built with Apple's hardened runtime, and notarized by Apple with the notarization ticket stapled to the disk image. That means macOS Gatekeeper has verified the app is from a known developer and has been scanned by Apple for malware, so it runs without warnings.

The only network connections — and what they're for

Being precise matters more than sounding absolute. If you watch Copydrop with a network monitor like Little Snitch, here is everything you will ever see — and note that none of it includes your clipboard:

Connection	When	What's sent
api.polar.sh	When you activate a license key, or on launch to re-check a stored one	Your license key — never clipboard content
copydrop.app (Sparkle)	Update checks (direct download build only)	A version check — never clipboard content

That's the complete list. The Mac App Store build has no Sparkle at all — the store handles updates — and licensing there is Apple's receipt. If you ever see Copydrop connecting to anything else, that's a bug we want to hear about.

Passwords never enter your history

Password managers mark what they put on the clipboard as concealed. Copydrop honors those markers — following the community nspasteboard.org conventions for concealed, transient, and auto-generated content — so that data is never captured in the first place. You can also exclude any other app from history with one click.

Verify it yourself

Don't take our word for any of the above. With Copydrop in /Applications, run these in Terminal:

Confirm it's notarized by Apple

spctl -a -vvv -t install /Applications/Copydrop.app

You should see accepted and source=Notarized Developer ID.

Confirm who signed it

codesign -dvv /Applications/Copydrop.app 2>&1 | grep Authority

The first line should read Developer ID Application: Jakub Had (3T64KN86GN).

Confirm nothing leaks your clipboard

Install Little Snitch (or run nettop), then use Copydrop normally for a day. Copy, search, paste. You'll see the two connections above — a license check and an update check — and nothing carrying what you copied.

Questions people ask

Is Copydrop open source?

Not today. That's a fair thing to want, and it's why this page leans on checks you can run against the shipped app — Gatekeeper, code signing, and a network monitor — rather than asking for trust.

What happens to my history if I stop paying or uninstall?

It's your data on your disk. Nothing is deleted remotely because there is nothing remote. Uninstalling removes the app; your database is a local file you control.

Does the trial send anything different?

No. The 4-day trial is the full app with no card and no account — same local-only behavior, same two connections.

Private by architecture, not by promise

Try the full app free for 4 days — no card, no account. Then $8.99 once.

Try free for 4 days

Your clipboard history never leaves your Mac.

Verifiable claims (checked July 2026): notarization and signing confirmed against the current Copydrop.dmg with spctl -a -vvv and xcrun stapler validate; concealed-content handling follows nspasteboard.org. Spot something that doesn't match what you see on your Mac? Tell us at hello@copydrop.app and we'll fix it.