Privacy
Pastiche does not collect your data. It has no accounts, no analytics and no crash reporting, and the app contains no networking code. This page says what it keeps on your Mac, and what this website does.
The app
Pastiche records what you copy so that you can paste it again later. To do that it stores, on your Mac only:
- Text you copied, in full, in a file called
history.json. - Images you copied, as PNG files in an
imagesfolder next to it. - For each entry, the time it was copied and the name and bundle identifier of the app that was in front when you copied it.
- Your settings, such as the shortcut, in the standard macOS preferences store.
These files live in ~/Library/Application Support/Pastiche/. They are not encrypted, so treat that folder like any other file of your own notes. Nothing in it is sent anywhere.
What it deliberately does not record
- Anything an app marks as concealed on the pasteboard, which is the convention password managers use.
- Items marked transient or auto-generated.
- Copies made while an app on your ignored list is in front. 1Password, Bitwarden and Keychain Access are on that list by default, and you can edit it in Settings.
An app that does not mark its secrets is recorded like any other copy. Use the ignored-apps list for such apps, or delete an entry with the Backspace key.
Deleting your data
Delete a single entry in the popup, choose Clear history in Settings to remove every entry and image, or delete the folder above. Quitting the app and deleting the folder removes everything Pastiche has stored, apart from the small preferences file.
Permissions
- Accessibility is optional. It lets Pastiche press ⌘V in the app you came from. Without it, the app still copies the selected item to the clipboard. Pastiche reads no screen content and no keystrokes with it.
- Open at login is optional and off by default.
This website
The site is a set of static files. It sets no cookies, loads no third-party scripts, fonts or analytics, and contains no trackers. The dark-mode button stores one word, light or dark, in your browser’s local storage; it never leaves your device. Like any web server, whichever service hosts the site may keep ordinary access logs, such as your IP address and the page requested. This site does not collect, read or process them.
Contact
Questions or concerns: please open an issue. The complete source is public, so every statement on this page can be checked against the code.