The short answer
Clipboard History is designed to reduce exposure: it has no account or cloud sync, stores history in its macOS sandbox, skips copies made while a supported password manager is frontmost, ignores concealed, transient, or automatically generated entries, and lets you pause or clear recording. But the local database is not a password vault, and ordinary unmarked content may still contain secrets.
Whether it is appropriate depends on your threat model. It is a practical fit for a personal Mac with a protected user account. On a shared, unmanaged, or high-security machine, consider using only the current clipboard—or keep history paused by default.
What is stored
Plain text, links, RTF or HTML plus a plain-text fallback, direct PNG or TIFF clipboard data, and references to copied Finder files or folders are stored in a local SQLite database inside the app sandbox:
~/Library/Containers/app.clipboard-history/Data/Library/Application Support/Clipboard History/clipboard.sqlite
Direct clipboard images retain their bounded raw payload and a bounded preview thumbnail. For Finder items, the database contains file metadata, a reference to the original location, and a small preview; it does not duplicate the complete source file. Learn exactly which formats work in the files and folders guide.
The database is not separately encrypted by Clipboard History. It relies on the protections of your macOS user account and disk. If you want another layer of protection against someone accessing a lost Mac's storage, review Apple's guidance for turning on FileVault.
What is skipped automatically
Copies made while 1Password, Bitwarden, Dashlane, KeePassXC, Apple Passwords, Keychain Access, or LastPass is frontmost are excluded by default. You can add other applications in Settings → Privacy.
The app also ignores clipboard entries marked with common concealed, transient, or automatically generated pasteboard types. That honors the privacy signals used by compatible password managers and other applications.
Important limit: an app may copy a secret as ordinary text without marking it concealed or transient. Clipboard History cannot reliably infer that a random string is a password, token, medical detail, or private message. Add the source app to the skip list or pause recording before copying sensitive material.
What uses the network
Your clipboard history is not uploaded or synchronized. The Mac app does not have an account system or product-analytics telemetry.
The app uses Sparkle to check its public GitHub-hosted update feed. Updates are signed and verified before installation. The application source, update feed, and release history are public for inspection.
Website measurement is separate from the Mac app. This site offers optional Google Analytics only after consent, and the homepage also uses aggregate Plausible measurement. Neither has access to clipboard content. The privacy overview explains website analytics and how to change your choice.
Why auto-paste requests permission
After you select an item, Clipboard History can ask macOS for permission to post the Command + V keyboard event back to the app you were using. This event-posting access is optional and is requested explicitly.
If you decline, selecting an item still puts its verified representation on the system clipboard. Press Command + V yourself to paste it.
You can review or revoke Clipboard History's permission in macOS System Settings under Privacy & Security. The app does not need this permission to record history, search it, or copy a selected item back to the clipboard.
Controls you can use now
- Pause recording from the menu bar before handling sensitive information. The pause state remains after restart.
- Exclude applications in Settings → Privacy when their copied content should never enter history.
- Delete one clip with Command + Delete from the history panel.
- Clear all history from Settings → Storage.
- Remove stored data with the steps in the uninstall and data-removal guide.
- Audit the code or report a concern through the public GitHub issue tracker.
A practical decision checklist
- Use a strong Mac login password and lock the screen when away.
- Enable FileVault if your risk profile calls for startup-disk protection.
- Review the default app exclusions and add your work-specific private apps.
- Set a history limit that matches how long you truly need copied data.
- Clear old history periodically, especially before lending or transferring the Mac.
Still deciding? Compare the privacy and workflow trade-offs in our Mac clipboard-manager roundup, or read the full FAQ.