Your clipboard stays yours.

Stowpad is a local-first clipboard manager for Mac. Saved clipboard contents are encrypted on your Mac and Stowpad does not send clipboard content to any cloud service.

Smart Features are optional. Protected clips are excluded from search indexes, suggestions, OCR-derived metadata and model requests.

Stowpad has no accounts or sign-in, contains no advertising or tracking code, and does not collect app analytics. Exactly one app feature reaches a server outside your Mac: reference lookup at doi.org, described in section 06. It runs only after you enable lookup and press Look Up.

Clipboard history, attachments, source-app context, paste-learning events and local smart indexes are encrypted. The encryption key is stored in your Apple login Keychain.

File clips are decrypted only into an owner-only temporary paste directory and removed shortly after paste. Stowpad does not log raw clipboard contents or encryption keys.

You can mark apps as protected. New clips from those apps hide their contents and require Touch ID or your Mac password before they can be pasted or read.

Protected clips are not indexed, suggested, used for paste learning or sent to an on-device language model. Protecting an app also removes its retained smart metadata from existing clips.

Capture Text and Capture Table use Screen Recording for the region you select. The selected image is temporarily written inside Stowpad's private container, decoded locally with Apple Vision and immediately deleted.

The Colour Picker's Point mode uses Apple's NSColorSampler and needs no Screen Recording access. Optional 3 × 3, 5 × 5, 9 × 9 and 15 × 15 modes use ScreenCaptureKit in memory to average only the screen pixels around the point you select. They save no image and keep only the resulting sRGB value. If access is unavailable, Stowpad offers an explicit Point sample instead.

Vision can recover a table and present it as Markdown, CSV, TSV, LaTeX or Booktabs. No generative model sees the image. Captures from protected apps take the redacted protected-clip path.

Smart Features are opt-in. Apple Intelligence is the default generative provider and runs on this Mac. Stowpad does not use Private Cloud Compute or any cloud-model provider.

Ollama is an optional alternative that is off by default. It is a separate process on this Mac and requires an explicit disclosure before use. Stowpad restricts it to 127.0.0.1, disables system proxies, sends no credentials or cookies, and cannot be configured with a remote host.

Stowpad can recognise a reference identifier (a DOI, an arXiv id, etc.) in something you copied. Recognising it, and formatting a citation from what you already have, happen on your Mac and need no network.

Reference lookup needs a network connection. When you press Look Up, Stowpad sends the DOI or other reference identifier to doi.org. It sends no account, cookie, device identifier or other part of the clip. The network request also exposes your IP address. doi.org says it retains the identifier and IP address in service logs for performance monitoring, troubleshooting and management, and may share the IP address with the Registration Agency responsible for the DOI under its privacy policy. Stowpad asks for your agreement before the first lookup. It sends the request only when you press Look Up. Capture, rules and background activity never trigger a lookup.

Stowpad Pro is sold only through the App Store. Apple handles the transaction, and Stowpad never sees, receives or stores your payment details, your Apple Account or your billing address.

Whether you have Pro is answered by Apple's signed subscription status, checked each time Stowpad launches.

Stowpad keeps clipboard history until something removes it, and everything that removes it is yours to trigger. There is no server copy and no backup held by us, so deleting on your Mac is deletion.

You can delete a single clip from the panel, clear the whole history from Settings, or set an automatic schedule there (on quit, daily, weekly, fortnightly, monthly, or on days and a time you choose). A scheduled or on-close clear leaves Locked History in place; only Clear All Clipboard History removes it. Clearing history also clears the current system pasteboard. Free users keep the newest 30 clips usable; older clips stay encrypted in Locked History and remain exportable. Settings › Stowpad Pro shows how many and can permanently delete them.

Export requires Touch ID or your Mac password. Stowpad does not encrypt the CSV, plain text or JSON file you save.

Turning Smart Features off immediately erases their smart indexes, source-app identifiers and paste-learning events. Your ordinary history, pins, collections and tags remain. Removing Stowpad removes its encrypted store; deleting its key from your login Keychain makes any remaining copy unreadable.

Because Stowpad holds nothing about you on a server, there is no data for us to delete on request and no account to close. If you would like that confirmed in writing for your own records, ask.

This marketing website uses Vercel Analytics and Vercel Speed Insights to understand visits and page performance. Those website services receive ordinary browser, device, page and interaction data under their own privacy policies. They are not present in the Stowpad app, and website data is not joined to app data.

doi.org is the app's only third-party recipient, and only when you explicitly choose Look Up as described in section 06. There is no mailing list, advertising network or affiliated company receiving app data.

Like any web server, our host receives the page requested, the time and the visitor's IP address. We do not join this information to app data, use it to build a profile or pass it on.

Every optional part of Stowpad can be turned back off, and turning it off is what withdraws your agreement to it: Smart Features, Ollama and reference lookup each stop immediately and, where they created data, erase it. Direct Paste uses the macOS Services system: the app you are working in requests a clip, Stowpad returns only the clip you choose through that request's private pasteboard, and the requesting app performs the insertion. Direct Paste requests no Accessibility permission, does not inspect other apps and does not monitor typing. Screen Recording is used only for selected-region text/table capture and optional larger colour samples; Point sampling does not need it. Screen Recording can be revoked at any time in System Settings › Privacy & Security, and Stowpad keeps working with Direct Paste, Point colour sampling and its other local features.

Stowpad is not directed at children. Its optional DOI lookup handles a reference identifier and the requester's IP address as described above.

Privacy questions, and requests for written confirmation of any of the above, can be sent to hello@stowpad.app. If this policy changes, the date below changes with it, and any change that affects what leaves your Mac will be described in the app before it takes effect.