Who we are
QuickPaste is a Windows clipboard manager and productivity app developed and published by the independent developer using the public name MarzDev ("we", "us"). This policy covers the QuickPaste app and the website at tryquickpaste.com.
Public developer/publisher name: MarzDev. For privacy questions, contact .
Where this policy refers to the "controller", it means the person or entity legally responsible for the relevant processing. This page uses the public developer name above so you can identify the project without publishing a personal residential address.
Personal data we handle, and why
The only personal data we handle is the small amount below. None of it is the content you copy or save in QuickPaste.
| What | Why we use it | Legal basis (UK/EU GDPR) | How long we keep it |
|---|---|---|---|
| Order details from Gumroad (such as your email address, license key and purchase information) | To confirm your purchase, provide your license and give you support | Contract (delivering what you bought); legitimate interests (support and preventing license misuse); legal obligation (financial records) | For as long as needed to support your license and to meet legal and accounting requirements |
| Messages you send us | To reply to you and resolve your request | Legitimate interests (helping you) | For as long as needed to resolve your request and a reasonable period afterwards |
| Website server logs (such as IP address, pages requested and timestamps), held by our hosting provider | To keep the website secure and running | Legitimate interests (security and operation of the site) | Under our hosting provider's retention practices |
| Google Analytics 4 website measurements (such as pages viewed, session statistics, approximate location, browser/device information and a pseudonymous analytics identifier) | To understand how the website is used and improve it | Consent, where required | According to the Google Analytics data-retention settings for this property |
| Microsoft Clarity website measurements and interaction insights (such as pages viewed, clicks, scrolls, browser/device information and session recordings with sensitive content masked) | To understand how visitors use the website and improve it | Consent, where required | According to the Microsoft Clarity project retention settings |
| Content you copy and save in the app | Not collected. It stays on your PC. | Not applicable | Not applicable |
Your data stays on your PC
QuickPaste is built so that your content never needs to leave your computer. The main QuickPaste store is kept locally on your PC. On Windows, the app uses Electron's safeStorage to protect the persisted store with Windows' own DPAPI key protection. This helps protect the stored data from other Windows users, but it is not a guarantee against malware or another process already running under the same Windows account.
The app stores the following on your PC only:
- Your clipboard history, including text and screenshots you copy
- Snippets, templates, links, actions, identities, documents and notes you save
- Vault entries such as passwords, API keys and tokens
- Images saved by the app, and your settings
We do not receive this information, we cannot see it, and QuickPaste has no account system or cloud sync that would upload it. Vault entries are masked on screen and kept separate from your Clipboard history. The Vault is a convenience and not a substitute for a dedicated password manager.
Saved screenshots are separate local PNG files stored in QuickPaste's application-data folder. They are local files rather than entries encrypted by the backup format; protection beyond that depends on the security of your Windows account/device.
When the app goes online
The Free plan does not require an account or an activation step. When you activate Pro, the app sends the license key and product identifier to Gumroad's license-verification API. Gumroad returns the verification result, and the app uses that result to unlock Pro. This connection is not used to upload the content you copy or save.
If you use an Action to open a link, your browser makes that request, not QuickPaste, and the website you visit has its own privacy practices.
This website
The QuickPaste website uses Google Analytics 4 and Microsoft Clarity to understand traffic and improve the site. Both tags are loaded only after you choose Accept analytics in the site's consent banner. If you decline, neither tag is loaded. Clarity receives ConsentV2 with analytics storage granted and ad storage denied after acceptance. You can change your choice at any time using Change analytics choice.
When enabled, Google Analytics may use first-party cookies and collect pseudonymous website-usage information such as pages viewed, session statistics, approximate location, and browser/device information. We do not send QuickPaste clipboard history, saved snippets, Vault entries, screenshots, or other app content to Google Analytics. Google documents that it does not log or store individual IP addresses from users in the UK, EU or Switzerland, although it may derive coarse location information from IP data before discarding the raw address.
When enabled, Microsoft Clarity collects website interaction information such as clicks, scrolling, and page activity and may create session recordings. Microsoft says Clarity masks sensitive content by default, and masks input-box content in all modes. This site explicitly masks its search fields and has no clipboard or secret-entry feature. We do not intentionally send clipboard contents, passwords, API keys, tokens, or other QuickPaste app content to Clarity. For visitors in the UK, EEA, and Switzerland, Clarity ConsentV2 is granted only after acceptance; if analytics is declined, Clarity is not loaded. Visitors elsewhere, including Canada, see the same choice and tags also remain off until acceptance. This description is not a determination of legal requirements in every region; please review the privacy practices and requirements relevant to your audience.
Like most websites, our hosting provider may keep standard server logs (for example IP address, pages requested and timestamps) for security and to keep the site running. We do not use these logs to identify individual visitors.
Our pages link to other services, including Gumroad and the Microsoft Store. When you follow those links you leave our site, and their policies apply.
Purchases and licenses
If you buy Pro through Gumroad, Gumroad processes your payment and issues your license key under its own terms and privacy policy. We do not see your full payment card details. We may see order details that Gumroad provides to us, such as your email address, license key and purchase information, so that we can support you.
If you get QuickPaste through the Microsoft Store, Microsoft handles the download and any payment under its own policies.
Sharing your information
We do not sell your personal information. We share information only with the services described above (for example Gumroad, Google Analytics and Microsoft Clarity when you consent, and our hosting provider) when needed to run them, or if the law requires it. Because your saved content stays on your PC, there is no copy of it for us to share.
Some of the services we rely on, such as Gumroad, are based outside the UK and may process data in other countries under their own safeguards. You can find the details in their privacy policies.
Security and backups
Because your data is stored on your PC, keeping your Windows account and device secure protects it. QuickPaste also uses several layers of protection:
- Local store protection. QuickPaste persists its main application store through Electron's safeStorage. On Windows, Electron says this uses Windows DPAPI to protect the stored data for the Windows user who encrypted it.
- Master PIN. The Master PIN is an extra gate required before QuickPaste will export data or wipe Clipboard history. It is not the password that encrypts an exported backup file.
- Encrypted backups. When you export, QuickPaste requires a Master PIN first and then asks you to create a separate backup password. The exported backup is encrypted with AES-256-GCM using PBKDF2-HMAC-SHA256 with 600,000 iterations, a fresh 16-byte random salt, and a fresh 12-byte random IV for each export. We do not receive your backup password or the backup file.
No system is perfectly secure, so keep your Windows account protected, choose strong PINs/passwords, and store backups somewhere you control. You can read the technical details in our encryption article.
Keeping and deleting your data
You control the data stored by the app. You can delete items inside QuickPaste, wipe your Clipboard history from within the app, or remove the app's data from your PC. Backups you export are files on your own storage, so you decide when to delete them.
Order and license records held by Gumroad or Microsoft are kept under their own policies. If you would like us to delete support messages you have sent us, contact us and we will do so.
Your rights
Depending on where you live (for example under UK or EU data protection law), you may have rights over personal data that an organization holds about you, such as the right to access, correct or delete it, to restrict or object to its use, and to complain to your local data protection authority. Since we hold very little personal data, most of it is the purchase and support information described above. If you want to exercise any of these rights, contact us. In the UK you can also complain to the Information Commissioner's Office.
Children
QuickPaste is not directed at children, and we do not knowingly collect personal information from them.
Changes to this policy
If we change how QuickPaste handles data, we will update this page and the date at the top. If a change is significant, we will say so here.
Contact
Questions about this page? Email us at quickpaste.app@gmail.com.