Scope
This policy applies to the One Copy website (1copy.app), the One Copy iOS app, and OneCopy for Mac. By using One Copy, you acknowledge this policy. If you do not agree, do not use the service.
Data we process
One Copy does not require an account. Content sent from the web or iOS app, and clipboard content synced after you enable Cloud Sync on Mac, is encrypted on your device before transmission. The server receives ciphertext, randomly generated file identifiers, timestamps, and technical information needed to deliver the service. Room codes, sync codes, and derived decryption keys are never sent to the server.
- Local Mac clipboard: OneCopy for Mac monitors the system clipboard in the background and stores encrypted history for text, links, images, and files on your Mac. Cloud Sync is off by default; while off, clipboard content is not uploaded to One Copy.
- Network and operational data: Cloudflare may process IP addresses, request metadata, and browser or device information to provide connectivity, security, and troubleshooting.
- Optional website analytics: the website loads Google Analytics only after you explicitly consent. It may process pseudonymous page-view and session data, approximate location, browser and device information, and a first-party identifier. We do not send room codes, sync codes, transferred content, or filenames to analytics. The native apps do not include the Google Analytics SDK.
- Device permissions: the iOS app accesses only photos or files you deliberately select. Accessibility permission on Mac is used only for automatic paste; you can decline it and continue using clipboard history.
Why we process data
We process this data only to provide encrypted cross-device transfer, maintain real-time connections, prevent abuse, protect the service, diagnose failures, and—with consent—understand aggregate use of website features. We do not sell personal information or use transferred content for advertising or profiling.
Retention and deletion
- Encrypted files normally expire 30 minutes after upload and may be deleted sooner when the last device confirms that it is leaving and destroying the room.
- A room keeps at most 200 messages. Inactive rooms are reclaimed after no more than six hours; confirming departure from the last connected device destroys room content immediately.
- Mac clipboard history stays on your device and is cleaned according to the retention period and item limit selected in Settings. If Cloud Sync is enabled, the cloud Vault keeps up to its configured history limit and encrypted images or files expire according to service configuration; disabling sync stops new uploads and downloads.
- Your analytics choice remains in local browser storage until you change it or clear browser data. Google Analytics and Cloudflare retain logs according to their configurations and policies.
- Temporary decrypted copies created by the iOS app for previews or opening files are cleared when you leave a room; the operating system may also clear temporary files under its storage-management rules.
Service providers
Cloudflare provides networking, security, server execution, and temporary object storage. Google Analytics is used only when you consent to website analytics. These providers may process technical data in the regions where they operate.
Your choices and rights
You can decline website analytics and withdraw consent at any time through Analytics preferences in the page footer. You can also leave and destroy a room when yours is the last device, clear local browser data, or stop using the service. Because One Copy has no accounts and the operator does not possess room codes or decryption keys, we generally cannot identify who owns a room or read, recover, or locate its data by content. Applicable law may give you rights to access, correct, delete, restrict, or object to processing.
Security and limitations
We use encryption capabilities provided by browsers and operating systems and take reasonable technical and organizational measures to protect the service. No internet transmission can be guaranteed completely secure. Use a unique, hard-to-guess room code, share links through a trusted channel, and keep your device and browser secure.
Children's privacy
One Copy is a general-audience service and is not directed specifically to children. We do not knowingly ask children to provide personal information. If you believe a child has provided personal information without appropriate consent, contact us using the channel below.
Changes and contact
We may update this policy when the product, law, or service providers change and will post a new effective date here. For privacy questions or rights requests, use the developer support channel shown on the app-store page where you obtained the app, or visit 1copy.app for the latest contact information.