Privacy Policy

Online Clipboard (online-clipboard.tech) is a free tool that lets you share text, images and files between devices using a temporary 4-digit code. All content is automatically deleted after 5 minutes. This policy describes what information we handle and how.

Last updated: February 24, 2026

We do not collect any personal information. Specifically:

• No name, email address, or phone number
• No account or user profile
• No raw IP address stored or logged (a one-way hash of your IP is used for rate limiting only — see section 3)
• No cookies set by us
• No location data
• No session identifiers linked to you

To prevent abuse and ensure fair use for all users, we enforce a daily upload limit of 5 images and 5 files per identity per day. To enforce this limit without storing personal data, we store a one-way SHA-256 hash of your browser fingerprint and a hash of your IP address in an AWS DynamoDB table. These hashes:

• Cannot be reversed to identify you
• Are used solely to count uploads per day
• Are automatically deleted at midnight UTC each day (via DynamoDB TTL)
• Are never linked to the content you upload

Text clips are stored in Google Firebase Realtime Database (asia-southeast1 region):

• Each clip is assigned a random cryptographically secure 4-digit code
• Clips expire and are deleted from the database after 5 minutes
• Firebase enforces server-side security rules — no unauthorized access is possible
• Data is encrypted in transit (HTTPS/TLS) and at rest by Firebase's infrastructure

Images and files are stored in AWS S3 (ap-south-1 region):

• Files are uploaded directly to a private S3 bucket using a short-lived presigned URL
• The S3 object key (upload token) is AES-GCM encrypted with your 4-digit code as the password before being stored in Firebase — nobody can retrieve your file without the code
• Files are automatically deleted from S3 after 24 hours via a lifecycle rule (usually they are deleted within 5 minutes via token expiry)
• No file content is ever read, processed, or stored by our servers — files go directly from your browser to S3

We use the following third-party services to operate this app:

• Google Firebase — database and hosting infrastructure. Firebase privacy policy
• Amazon Web Services (AWS S3 + Lambda) — file and image storage and API processing. AWS privacy policy
• Amazon DynamoDB — anonymous rate-limit counters (hashed only, auto-deleted daily). Governed by the AWS privacy policy above.
• Google Fonts — to load the Inter and Press Start 2P typefaces.
• Google AdSense — to display ads that help keep this service free. Google may use cookies and collect data per their own privacy policy: policies.google.com/privacy. You can opt out of personalized ads at adssettings.google.com.

Online Clipboard itself does not set any cookies. However, Google AdSense may set cookies to serve relevant ads and measure ad performance. These are governed by Google's cookie policy. You can manage cookie preferences through your browser settings or at adssettings.google.com.

This service is not directed at children under 13. We do not knowingly collect any information from children. Since we collect no personal information from any user, this is ensured by design.

Text clip content is retained for a maximum of 5 minutes from creation, then permanently deleted from Firebase. Images and files are inaccessible after 5 minutes (token expiry) and are physically deleted from S3 within 24 hours by a lifecycle rule. Rate-limit counters (hashed, anonymous) are deleted at midnight UTC each day via DynamoDB TTL. There is no backup, archive, or log of deleted content.

Since we collect no personal data, there is nothing to access, correct, or delete on our end. Your content is automatically deleted after 5 minutes. If you have questions about data held by Google (Firebase / AdSense) or AWS, please refer to their respective privacy controls.