Privacy
The Pastiche app collects no data. It has no accounts, no analytics and no networking code.
What the app stores
On your Mac only, in ~/Library/Application Support/Pastiche/:
| Item | Where |
|---|---|
| Text you copied | history.json |
| Images you copied | PNG files in images/ |
| Per entry: time copied, name and bundle ID of the frontmost app | history.json |
| Settings | macOS preferences |
These files are not encrypted. Nothing is sent anywhere.
What it does not record
- Items an app marks as concealed on the pasteboard.
- Items marked transient or auto-generated.
- Copies made while an ignored app is in front. 1Password, Bitwarden and Keychain Access are ignored by default. Edit the list in Settings.
An app that does not mark its secrets is recorded like any other. Add it to the ignored list, or delete the entry with Backspace.
Delete your data
- One entry: delete it in the popup.
- Everything: Clear history in Settings, or delete the folder above.
Permissions
- Accessibility is optional and requested only if you turn on auto-paste. It lets Pastiche press ⌘V in the app you came from. Pastiche reads no screen content and no keystrokes with it.
- Open at login is optional and off by default.
This website
This website, unlike the app, uses Google Analytics to count visits. It loads Google's gtag.js script, which sets first-party _ga cookies and sends Google the page you view, the referring page, your approximate location and your device type. I use it only to see how many people visit and how they find the site. It loads no other third-party scripts or fonts. The dark-mode button stores light or dark in your browser's local storage. That value never leaves your device. The web host may keep ordinary access logs. This site does not read them.
Contact
Open an issue. The source is public, so you can check every statement above against the code.