100% COOKIE-FREE · ZERO TELEMETRY

Privacy Policy

Effective Date: October 16, 2026 · Last Updated: October 16, 2026

The Sovereign Summary (TL;DR): PasteMesh is built on a strict zero-cloud, local-first architecture. Your clipboard payloads never touch our servers. This website (pastemesh.net) is 100% cookie-free and uses zero third-party tracking scripts—which is why we never annoy you with a cookie consent banner.

1. PasteMesh Software & Local Vault Privacy

The PasteMesh CLI, background daemon, desktop dashboard, and mobile applications operate exclusively peer-to-peer (P2P) over your local network or private overlay network (e.g., WireGuard/Tailscale).

Zero Cloud Relay: We do not operate central clipboard relay servers. All clipboard entries are encrypted locally using ChaCha20-Poly1305 with per-mesh 256-bit keys stored exclusively on your devices (~/.config/pastemesh/vault/).
Zero Application Telemetry: PasteMesh binaries contain no crash reporters, usage analytics, or phone-home beacons.

2. Website Privacy & 100% Cookie-Free Operation

When you visit https://pastemesh.net:

No Tracking Cookies: We do not set any first-party or third-party HTTP cookies, advertising identifiers, or cross-site tracking pixels.
No Third-Party Analytics Providers: We do not use Google Analytics, Meta Pixel, PostHog, or any external client-side telemetry service. Any aggregate traffic metrics are derived strictly from first-party server-side access logs.
Local Theme Preference Only: If you click the theme selector in the navigation bar, your chosen visual theme (pastemesh_theme_pref) is saved locally in your browser's localStorage solely to remember your display preference across page loads. It is never transmitted over the network.

3. Commercial Checkout & Merchant of Record

If you voluntarily click a checkout button to purchase a Pro Sovereign license or Enterprise Fleet subscription, checkout and payment processing are handled by our Merchant of Record, Lemon Squeezy (lemonsqueezy.com).

During checkout only, Lemon Squeezy collects necessary billing details (such as your email address, billing country for VAT/sales tax compliance, and payment method) in accordance with the Lemon Squeezy Privacy Policy.
PasteMesh never receives or stores your raw credit card numbers or banking credentials. We receive only order metadata (email address, license tier, seat count, and transaction reference) required to issue and verify your cryptographically signed license key.

4. Your Rights (GDPR / CCPA) & Contact

Because we do not track visitors or store personal clipboard data, we hold no behavioral profiles on you. If you are a commercial license holder and wish to access, update, or request deletion of your billing/licensing record (subject to statutory tax retention requirements), please contact us via the support channel listed on your license receipt or at privacy@pastemesh.net.

5. On-Device Mobile & Desktop Hardware Permissions

On Android, iOS, iPadOS, macOS, Windows, and Linux, PasteMesh requests only strictly scoped, optional hardware permissions that execute 100% locally on your device:

Camera (CAMERA / NSCameraUsageDescription): Used strictly on-device when you open the QR Scanner to pair with a nearby peer via a pastemesh://pair QR code. Camera frames are never recorded, stored, or transmitted.
Bluetooth Low Energy (BLUETOOTH_SCAN, BLUETOOTH_ADVERTISE, BLUETOOTH_CONNECT): Used solely for proximity peer discovery (neverForLocation on Android 12+) and offline encrypted clipboard synchronization when Wi-Fi is unavailable or client-isolated.
Local Network (INTERNET, NSLocalNetworkUsageDescription): Used for mDNS/UDP peer discovery (_pastemesh._tcp) and direct peer-to-peer ChaCha20-Poly1305 encrypted clipboard transfers over your LAN or private VPN.
Notifications (POST_NOTIFICATIONS): Optional permission used to notify you when a peer beams a new clipboard item or pairing request.

6. Data Retention & Instant Local Data Deletion (Google Play & App Store Data Safety)

PasteMesh requires zero user accounts and stores zero clipboard data in the cloud. Every encrypted vault key (vault-*.key), catalog index (index-*.json), and encrypted payload blob (blobs/*.blob) resides exclusively inside your local application sandbox (~/.config/pastemesh/ on desktop or app-private storage on Android/iOS with OS cloud backup disabled).

In-App Vault Purge: Open the Left Navigation Drawer (☰ → Clear History...) or run pastemesh history clear to permanently wipe unpinned or all encrypted clips and emit cryptographic deletion tombstones across your mesh.
Complete Key & Vault Destruction: Uninstalling the PasteMesh app (or clearing App Storage in Android/iOS Settings, or deleting ~/.config/pastemesh on desktop) immediately and irreversibly destroys all local encryption keys and vault data. Full step-by-step instructions are available on our Support & Data Deletion Page.