← Back to Home

Privacy Policy

Last updated: April 6, 2026

This Privacy Policy explains how Klip collects, uses, and protects information when you use our Website (klip-it.app) and the Klip desktop Application. We are committed to protecting your privacy and processing your data in accordance with the EU General Data Protection Regulation (GDPR) and the Polish Act on Personal Data Protection of 10 May 2018.

1. Data Controller

The Data Controller responsible for your personal data is:

Patryk
Email: contact@klip-it.app
Website: klip-it.app

As the Data Controller, we determine the purposes and means of processing personal data related to this Website and Application. No Data Protection Officer (DPO) has been appointed, as we do not meet the thresholds requiring one under Article 37 of the GDPR.

2. Scope of This Policy

This Privacy Policy applies to:

  • Visitors to the Website klip-it.app
  • Users who purchase a Klip Pro license
  • Users who contact us by email

This Privacy Policy does not apply to data processed locally on your own devices by the Klip Application. The Application processes clipboard content and file data exclusively on your local network between your own devices. This data never reaches our servers.

3. Data We Collect and Why

3.1 Website Analytics and Download Event Logs

Data collected: Anonymised page views, referring URLs, browser type, operating system, country-level location, session duration, and limited technical event logs when you click a download button (event type, platform, target file URL, page path, referrer, timestamp, and request metadata such as country/colo and user agent).

Collected by: Cloudflare Web Analytics.

Purpose: To understand how visitors use the Website, measure download conversion, detect abuse, and improve content and performance.

Legal basis: Legitimate interests (Article 6(1)(f) GDPR) — we have a legitimate interest in operating and securing the Website and understanding product interest. Cloudflare Web Analytics does not use cookies and does not build advertising profiles.

Retention: Retained by Cloudflare per their data retention policy and our operational logging settings. We do not sell or share this data for advertising purposes.

3.2 Purchase and License Data

Data collected: Email address, country, and payment information (processed directly by Lemon Squeezy).

Collected by: Lemon Squeezy LLC, who acts as Merchant of Record.

Purpose: To process your payment, issue a License Key, and deliver it to you by email. We receive only your email address from Lemon Squeezy after a successful purchase.

Legal basis: Performance of a contract (Article 6(1)(b) GDPR) — processing is necessary to fulfil your purchase and deliver the license.

Retention: We retain your email address for as long as your license is active or until you request deletion. Lemon Squeezy retains transaction records in accordance with their own retention policy and applicable tax law.

3.3 Email Communications

Data collected: Your email address and the content of your message.

Purpose: To respond to your support request, question, or complaint.

Legal basis: Legitimate interests (Article 6(1)(f) GDPR) — we have a legitimate interest in responding to communications addressed to us.

Retention: Email correspondence is retained for up to 24 months, after which it is deleted unless a longer retention period is required by law.

4. Data We Do Not Collect

We explicitly do not collect the following:

  • The content of your clipboard
  • Files transferred between your devices
  • Device identifiers or hardware information
  • Location data beyond country-level aggregation in analytics
  • Any data from the Klip Application itself

5. The Klip Application and Privacy by Design

The Klip Application is built on a Privacy by Design principle. All clipboard synchronisation and file transfers occur directly between your devices using peer-to-peer (P2P) connections on your local network. All data is encrypted in transit using TLS 1.3. No clipboard content, file data, or usage data is ever transmitted to our servers or any third-party servers.

6. Third-Party Processors

We use the following third-party services that may process data on our behalf or as independent controllers:

6.1 Cloudflare, Inc.

Role: Website hosting, CDN, Web Analytics, and edge log processing for website events.

Data processed: Anonymised website traffic data and limited technical event metadata related to website interactions (such as download button clicks).

Location: United States (Cloudflare complies with EU-US Data Privacy Framework and uses Standard Contractual Clauses for EU data transfers).

Privacy policy: cloudflare.com/privacypolicy

6.2 Lemon Squeezy LLC

Role: Payment processor and Merchant of Record.

Data processed: Payment details, email address, country, and transaction records.

Location: United States (Lemon Squeezy complies with GDPR for EU customers and uses Standard Contractual Clauses).

Privacy policy: lemonsqueezy.com/privacy

7. International Data Transfers

Both Cloudflare and Lemon Squeezy are based in the United States. When your data is transferred to these providers, it is transferred outside the European Economic Area (EEA). Such transfers are made on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection. You can request a copy of the relevant safeguards by contacting us at contact@klip-it.app.

8. Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data:

  • Right to access (Art. 15) — you can request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16) — you can request that we correct inaccurate or incomplete data.
  • Right to erasure (Art. 17) — you can request that we delete your personal data, subject to certain legal conditions.
  • Right to restriction of processing (Art. 18) — you can ask us to restrict the processing of your data in certain circumstances.
  • Right to data portability (Art. 20) — you can request a copy of your data in a structured, machine-readable format.
  • Right to object (Art. 21) — you can object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds.
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
  • Right to lodge a complaint — you have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.

To exercise any of these rights, contact us at contact@klip-it.app. We will respond within 30 days. We may need to verify your identity before processing your request.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These measures include:

  • Use of HTTPS/TLS encryption for all Website communications
  • End-to-end TLS 1.3 encryption for all data transferred by the Application
  • Access to personal data (email addresses) is limited to the Data Controller only
  • No personal data is stored in databases accessible from the internet

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, notify you directly.

10. Cookies

The Website does not use tracking cookies or advertising cookies. Cloudflare Web Analytics operates without cookies. No cookie consent banner is required or displayed.

Your browser may store certain technically necessary information (such as HTTPS security settings) as part of normal browser operation. This is outside our control and does not constitute tracking.

11. Children's Privacy

Klip is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at contact@klip-it.app and we will delete it promptly.

12. Links to Other Websites

The Website may contain links to third-party websites, including GitHub and Lemon Squeezy. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing any personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of the Website or Application after changes are posted constitutes acceptance of the updated policy.

14. Contact

For any questions, requests, or complaints regarding this Privacy Policy or the processing of your personal data, please contact:

Patryk
Email: contact@klip-it.app
Website: klip-it.app

You also have the right to contact the Polish Data Protection Authority directly:
Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
uodo.gov.pl