Privacy Policy

Last updated August 21, 2026

Clipo is a paste and file sharing service at clipo.ing. There are no user accounts. This policy explains what we store when you use the site, how long it stays, and what you can do about it.

Who we are

Clipo is operated at clipo.ing. When this policy says “we” or “Clipo,” it means the operator of that service.

Information you give us

You choose what to share. That can include:

  • Text you paste, including notes, logs, or code
  • Files you upload
  • An optional custom URL (slug)
  • An optional password
  • Expiration, view-limit, and conversation settings
  • Replies if conversation is turned on
  • A paste link during Receive / device handoff

Anyone with the link can read a paste unless you set a password. Do not put secrets in a paste unless you understand that risk.

Information we collect automatically

  • Hashed IP addresses. We HMAC-hash the client IP and use that value to rate-limit abuse. We do not store the raw IP for that purpose.
  • Receive sessions. A short-lived handoff ID and, once delivered, the paste URL. These expire after 10 minutes.
  • Operational logs that a host or reverse proxy may keep (for example nginx access logs). Those are not part of the Clipo application database.

Clipo does not use advertising or third-party analytics scripts.

Cookies and local storage

  • Password access cookies (paste_access, and a related marker). Set only after you unlock a password-protected paste. They are HTTP-only, last up to 24 hours, and let this browser read that paste again without retyping the password.
  • Theme preference. Light/dark/system is saved in the browser (local storage), not on our servers.

If you install Clipo as an app, your browser may also cache static assets for offline use. Paste content still requires a network connection.

Passwords

Optional paste passwords are stored as a salted scrypt hash. We cannot read your password back. If you forget it, we cannot recover the paste for you.

How we use this information

  • To show your paste to people who have the link (and password, if any)
  • To expire, view-limit, or delete pastes as you configured
  • To rate-limit requests and reduce abuse
  • To complete a Receive handoff between two devices

We do not sell your information. We do not use paste content for advertising.

How long we keep it

  • Pastes and files until they expire, hit the view limit, or are deleted. A paste set to never expire stays until it is deleted or removed for abuse.
  • Rate-limit hashes are cleaned up after about two days.
  • Handoff sessions expire after 10 minutes.
  • Access cookies expire after 24 hours, or when you clear site cookies.

Database backups, if enabled on the host, may retain a copy of paste data until those backups rotate.

Your choices

  • Do not paste anything you are not willing to store on our servers.
  • Set expiration, a view limit, or a password when you create a paste.
  • Delete a paste from its page if you still have the link.
  • Clear cookies and site data in your browser to drop access tokens and theme.

Because there are no accounts, we cannot look up “your” pastes by email or username. If you need a paste removed and you no longer have the link, we may not be able to find it.

Sharing and disclosure

Content is shown to anyone who can open the URL (and enter the password, if you set one). We may also disclose information if required by law, or if needed to keep the service running and to stop abuse.

Children

Clipo is not directed at children under 13, and we do not knowingly collect personal information from them. Do not use Clipo to share a child’s personal data.

Changes

We may update this policy. The “Last updated” date at the top will change when we do. Continued use of clipo.ing after an update means you accept the revised policy.

Contact

Privacy questions: privacy@clipo.ing. Legal notices: legal@clipo.ing. More addresses are on the Contact us page. Use of Clipo is also covered by the Terms of Use.