ClipVault1. Who we are
This policy is issued by PROJECTTEAMFORYOU (프로젝트팀포유), the publisher of ClipVault (“we”, “us”). It covers the ClipVault program and this website. Our business details are at the bottom of this page.
2. The ClipVault program
What you copy is stored only on your own PC, in %LOCALAPPDATA%\ClipVault. We never receive it. The program has no account, no sync and no telemetry.
Update check and automatic update (on by default). Once a day the program requests a small file, release.json, from this website over HTTPS. The request has no body, no cookies and no identifier; the only header the program adds is a User-Agent naming ClipVault, its version and the address of this site. If a newer version exists, the program downloads it from this site and installs it only when its size and SHA-256 match the values published in that file, Windows trusts its Authenticode signature, and the signing certificate is ours; the new version is used the next time ClipVault starts. You can turn this off in Updates & news, the first window offers to turn it off, and an organisation can disable it by policy. Like any web request, it comes from your IP address, and the hosting provider's standard logs may record that address, the time and the User-Agent. We do not count these requests or link them to anything. News and offers come from the same file, are off by default and send nothing extra. Some may be our own ads, marked as such; the program shows no one else’s ads and contains no ad code. Opening one opens a link on this website in your browser, which counts the click as described in section 3.
Links. A link you click in the program opens in your web browser, and the site you visit applies its own policy.
Security: data flow, limits and how to report a vulnerability →
3. This website
The pages are static files. They set no cookies of their own, but they do load Cloudflare Web Analytics for visit statistics (immediately below).
Cloudflare Web Analytics. This website uses Cloudflare Web Analytics for visit statistics. It sets no cookies, builds no browser fingerprint and follows nobody from site to site. Your browser sends Cloudflare the address of the page you are on, the referrer, the kind of browser and device, the country and how long the page took to load; we see only the totals. It is not in the program (ClipVault.exe), nor in the copy of this page that ships beside the executable.
Stored in your browser only. The language you pick is remembered in local storage under clipvault.site.lang, and a service worker keeps copies of the pages and images so the site opens offline. Neither is sent to us; clearing this site's data in your browser removes both.
Visit counter. When this page opens, one is added to a tally for the date (UTC) and a two-letter country code, and the running total is shown on the landing page. No cookies are used, and we store no IP address, User-Agent or referrer. We cannot tell whether the same person opened the page twice, so we count it twice rather than pretend otherwise. The tally cannot identify you.
Download counter. When you download a file, one is added to a tally for the date (UTC), the file name and a two-letter country code that the hosting provider derives from the connection. We do not store your IP address, User-Agent, referrer or cookies; the User-Agent is read only to avoid counting bots and link previews. The tally cannot identify you.
Our own ads. Some pages show an announcement or offer from us, marked “Ad”. The page asks this website for the current ads in your language — no cookies, no identifier. When you click one, we add one to a tally for the date (UTC), the ad and a two-letter country code, then send you on to the advertiser’s page. We do not store your IP address, User-Agent, referrer or cookies. From there, that site’s policy applies.
Share menu. Only when you pick a network does your browser open that network's share page with this page's address and title. From then on, that network's policy applies.
4. Why we process information
- To deliver the website and the downloads, and to keep them secure
- To count downloads in aggregate — which files, on which days, from which countries
- To answer questions, requests and vulnerability reports you send by email
We do not use personal information for advertising or profiling, and we do not sell it.
5. What we process
The ClipVault program collects no personal information. The website and email involve the following.
| What | Items | When and by whom |
|---|---|---|
| Connection data | IP address, time, requested address, User-Agent | Each visit, download and update check — processed by our hosting provider to deliver and protect the service |
| Visit tally | Date, two-letter country code (not personal information) | Each time the landing page opens |
| Download tally | Date, file name, two-letter country code (not personal information) | Each download |
| Ad click tally | Date, ad, two-letter country code (not personal information) | Each click on one of our own ads, on this website or in the program’s news |
| Your email address, any name you give, and your message | When you write to us |
We do not direct ClipVault at children under 14, do not ask anyone's age, and do not knowingly collect a child's personal information. If we learn that we hold any, we destroy it without delay.
6. Retention and deletion
- Connection data: kept by the hosting provider under its own retention rules. We do not copy it into any system of ours.
- Visit, download and ad-click tallies: kept as aggregate statistics for as long as they are useful. They identify no one.
- Email: deleted within one year after the question or report is closed, unless a law requires us to keep it longer.
- Clipboard history: never reaches us. It stays on your PC for the retention period you choose in the program.
When a retention period ends, electronic records are deleted so that they cannot be restored.
How it is destroyed: once the retention period ends or the purpose is met, the personal information is destroyed after the privacy officer has confirmed it. We keep no paper records, so everything destroyed is an electronic record.
7. Sharing with third parties
We do not give personal information to third parties, except where a law requires it — for example, a lawful request from an investigating authority.
8. Service providers and transfers abroad
We use the providers below to run the website and email. They process data on our behalf, and may do so outside the Republic of Korea.
| Provider (country) | Contact | Task | Data |
|---|---|---|---|
| Cloudflare, Inc. (United States) | privacyquestions@cloudflare.com | Hosting and delivering the website, security, storing the download files and the visit and download tallies, visit statistics (Cloudflare Web Analytics) | Connection data, visit and download tallies, visit statistics |
| Google LLC (United States) | support.google.com/policies/contact/general_privacy_form | Email (Gmail) for projectteamforyou@gmail.com | Emails you send us |
Data reaches these providers over the network at the moment you visit the website, download a file or send us an email, and is kept for the periods in section 6. You can avoid this by not using the website or email; the program itself needs neither once you have it.
9. Your rights
You can ask us to show, correct or delete personal information we hold about you, or to stop processing it, by writing to projectteamforyou@gmail.com — yourself or through a representative. We will reply within 10 days. Because we hold almost nothing that identifies a person, the answer will often be that we hold nothing about you.
We do not hold your clipboard history. You can view, export or delete it in the program, or remove the whole %LOCALAPPDATA%\ClipVault folder.
10. Safeguards
The download counter stores no personal information. The statistics endpoint answers only a request carrying a secret token, and does not exist at all when no token is configured. The website and downloads are served over HTTPS, and access to the hosting account is limited to the publisher. The page where we manage our own ads requires a Cloudflare Access sign-in (or a secret token) and does not exist when neither is configured.
12. Privacy officer
For questions and requests about personal information, contact:
- Privacy officer
- LEE YOOSANG
- projectteamforyou@gmail.com
- Phone
- 070-7620-7256
13. Where else to turn
If you believe your rights have been infringed, you can also contact these Korean bodies:
- Personal Information Infringement Report Center (KISA) — privacy.kisa.or.kr, call 118
- Personal Information Dispute Mediation Committee — www.kopico.go.kr, call 1833-6972
- Supreme Prosecutors' Office, cybercrime investigation — www.spo.go.kr, call 1301
- Korean National Police Agency, cyber bureau — ecrm.police.go.kr, call 182
14. Changes to this policy
If this policy changes, the new version will be posted on this page with its effective date and a note of what changed. This policy takes effect on 2026-09-16. What changed on this date: the update check is now on by default and also installs what it finds, so section 2 describes it as on rather than optional; you can switch it off in the program.
15. ClipVault for Android
This section applies to ClipVault for Android (package com.projectteamforyou.clipvault), from the day it is first published on Google Play. It works like the Windows program: what you copy is stored only on your phone, in the app’s private storage, encrypted with a key held in the Android Keystore that cannot leave the phone. We never receive it. The app has no account, no sync, no advertising, and no analytics or crash-reporting library.
The app does not have the INTERNET permission, so Android does not let it send or receive anything over a network. It has no update check; updates come through Google Play. Links in the app (this policy, the terms, the website) open in your browser, and that visit is then between your browser and this website, as described in section 3. When you tap a button to open a link, call a number, show an address on a map, add a date to your calendar or share a clip, ClipVault hands only that text to the app you choose (browser, phone, map or calendar app); what that app does with it is governed by its own policy. A QR code is drawn on your screen and sent nowhere. Text in pictures is read by Google ML Kit text recognition, which runs inside the app on your phone; its usage-logging components are removed from the app, and without the INTERNET permission nothing could be sent anyway.
Permissions. Notifications (optional, only for the “Save clip” shortcut), biometric or screen-lock authentication (optional, only to lock the app), and the boot-completed signal (only to restore that optional notification after a restart). The app asks for nothing else: no contacts, files, location, camera, microphone, accessibility access or other apps’ data.
How the clipboard is read. Android lets an app read the clipboard only while it is on screen. ClipVault therefore saves a clip when you open the app, when you tap its Quick Settings tile or notification, when you open its keyboard, or when you choose ClipVault in the text-selection menu or the share sheet; it does not watch the clipboard in the background. A clip that the app it came from marks as sensitive, such as a password manager’s, is not saved unless you turn that on. Text that looks like a password or key is masked on screen, and you choose whether it is kept, expires or is never saved. Pictures. When you share a screenshot or picture to ClipVault, copy one, or add one with the system photo picker, the app keeps that picture encrypted with its own key, which only this phone's key store can unlock, and reads the text in it on the phone so you can search and use it. The app has no permission to read your photo library. You can turn off keeping pictures, or reading their text, in Settings.
The ClipVault keyboard only shows your saved clips and inserts the one you tap. It has no letter keys, does not read, record or store what you type or what is in the text field, and shows no clips in password fields. Android shows its standard warning when you enable any keyboard; that warning is general and not specific to ClipVault.
Google Play. If you install or update the app through Google Play, Google processes information about that under its own privacy policy. The Play Console gives us aggregate figures such as installs and, if you allowed it on your device, crash statistics from Android vitals. None of this identifies you or contains your clips.
Your control. In the app you can view, edit, export or delete clips, clear everything in Settings, or uninstall the app, which removes all of it. Exports leave out credentials and clips that expire. Android cloud backup and device-to-device transfer are switched off for this app because the encryption key cannot move to another phone. A file you export is yours to protect.