Your library stays on your device.

Clipboard text, screenshots, OCR, tags and collections are stored locally. Snipharbor does not send them to its payment, licensing or update services.

Capture and encryption

Capture is optional. App exclusions cover executable names, including the whole browser process. Supplied clipboard privacy markers are respected, but not every password or private tab can be identified. Pause capture before copying secrets.

The database and search index use SQLCipher with a random key protected by Windows DPAPI. This protects a copied database without its key. It cannot protect against malware running as your Windows user. Original clipboard contents may exist elsewhere. Legacy migration copies and JSON exports are readable; a portable age backup uses your chosen passphrase.

Purchases and device access

Hosted checkout is provided by Lemon Squeezy where configured. It processes payment details under its own policies. The license service stores receipt email, provider/order references, amounts, device hashes, entitlements and activation/revocation records. Device hashes are pseudonymous identifiers. No card number is stored by the desktop app.

Recovery uses emailed, expiring, single-use codes. Brief service logs and abuse counters help diagnose failures; they must not contain clipboard data, full tokens or card details. Financial records may need retention under applicable law.

Updates and website storage

Manual update checks contact GitHub. The website saves an order ID and purchase access secret in this browser to resume checkout. Recovery sessions stay in page memory. The Windows app protects its saved purchase credentials with DPAPI. Hosting, checkout and email providers process the network requests needed to deliver these services.

Your choices

Pause capture, exclude apps, delete clips, empty trash, or export your library. Export remains available after license expiry. Contact the configured support address for purchase records, access or deletion requests. Legally required transaction records may be retained.

Owner identity: Not configured for public sales yet. · Effective for 0.1.6. No advertising trackers are included in this website source.