No Tracking Cookies.
Just Local Memory.
Last updated: June 24, 2026
We Don't Use Advertising or Cross-Site Tracking
Most apps use cookies to track you across the web. We don't. The Cross Paste application (the actual clipboard syncing app you use on your devices) does not use advertising or cross-site tracking cookies. When you copy and paste content, sync between devices, or access your clipboard history, we use local storage and secure encryption — not cookies. Cross Paste is built on a "Local First" philosophy. Your cryptographic identity lives on your device, not in a cookie jar on our servers.
Note: Both our website (crosspaste.app) and the apps use PostHog, a privacy-respecting, EU-hosted product analytics service, to understand how Cross Paste is used. It records usage events and metadata only and never your clipboard contents. See our Cookie Policy and the Product Analytics section below for details.
Local Storage & Secure Enclave
We use Local Storage and Secure Enclave technology to store your unique Identity Keys and Group Keys directly on your device.
These keys never leave your device in unencrypted form. They are used locally to encrypt and decrypt your clipboard data before any network transmission occurs.
What We Store Locally
| Item | Purpose |
|---|---|
Device ID | To identify your device within your device group so encrypted clipboard data syncs to the right devices. |
Encrypted Group Key | To decrypt your history locally. Never sent unencrypted. |
Recovery Key Hash | To let you recover your group without revealing the actual key. |
Technical Details
Browser Local Storage
On web and desktop clients, we use the browser's localStorage API to persist your encrypted keys. This data is sandboxed to our domain and cannot be accessed by other websites.
Mobile Secure Storage
On iOS and Android, we use platform-specific secure storage mechanisms:
- iOS: Keychain Services with
kSecAttrAccessibleWhenUnlockedThisDeviceOnly - Android: EncryptedSharedPreferences backed by the Android Keystore
What We Never Store
- Your plaintext clipboard contents
- Your Recovery Key (you are the only holder)
- Advertising identifiers or cross-site tracking cookies
Product Analytics
Cross Paste uses PostHog, a privacy-respecting product analytics service hosted in the European Union (eu.posthog.com), to understand how the app and website are used so we can improve them. Analytics capture usage events and metadata only — such as event counts, feature categories, app version, and platform.
To distinguish devices, PostHog stores an analytics identifier (your device ID) using analytics cookies on the web and local storage in the mobile and desktop apps. It never receives your clipboard contents, Recovery Key, or any personal content. For more detail, see our Cookie Policy and Privacy Policy.
Data Retention
Local storage data persists until you explicitly clear your browser data or uninstall the app. If you lose access to all your devices, your encrypted group data becomes unrecoverable without your Recovery Key.
Questions?
If you have questions about our local storage practices, contact us at [email protected].