Privacy Policy

Last updated: July 26, 2026

Overview

Webklip is an ephemeral online clipboard operated by LogiMaxx Systems (“we”, “us”). We do not sell your data, build advertising profiles, or use clip content for marketing.

The public service is designed for anonymous clip sharing — no sign-up is required to create or view clips. Optional accounts are available for people who want a dashboard, teams, or API keys. Account features never gate the core clipboard flow.

Who is responsible

The data controller for the public Webklip service is LogiMaxx Systems. Privacy requests: contact@logimaxx.ro.

If you self-host Webklip, the operator of that instance is the controller for data processed on that instance. This policy describes the public service at webklip.com and the default product behavior.

What we process

Clips

When you create or view a clip, we may process:

• Clip content — text and uploaded files, plus metadata such as filename, MIME type, size, language, visibility, and view counts
• Optional security settings — owner-password hashes (bcrypt; we never store these in plaintext), E2E salt and wrapped keys for passphrase-protected clips, optional legacy PIN hashes, and optional webhook URLs you configure
• Version history — prior clip content saved while editing, deleted with the clip
• Technical signals — IP address used only in memory for rate limits and lockouts after failed legacy PIN or owner-password attempts (not stored as a profile)

By default, clip content is stored so the service can serve it. If you enable passphrase end-to-end encryption, the browser encrypts content before upload and we store ciphertext, a public salt, and a wrapped content key only — never your passphrase. We cannot read that content.

Optional accounts

If you register, we process the email address and password hash you provide, plus account-scoped data such as API keys and team membership. You can use Webklip without creating an account.

Webhooks

If you set a webhook on a clip, we send event notifications to the URL you provide (for example read, burned, or expired). Payloads include the clip slug, event type, timestamps, and view-related fields — not clip content. You are responsible for the destination you configure.

Browser storage on your device

The app may store UI preferences locally in your browser (for example theme and layout), using localStorage. That data stays on your device and is not sent to us as a user profile.

Aggregate operations data

We may keep aggregate operational statistics (for example counts of active clips) that do not identify individuals.

Why we process data (legal bases)

• Contract / service delivery — to create, serve, sync, and expire clips you create or access
• Legitimate interests — security (rate limiting, abuse prevention), service reliability, and understanding aggregate traffic to public marketing pages
• Legal obligation — when we must retain or disclose information to comply with applicable law

How long we keep clip content

• Default lifetime is 15 minutes. You can extend it (up to 1 year) or pick a custom date/time
• Burn-after-read deletes on the first real view (not link previews). Unread burn clips still expire after 7 days so abandoned one-time links do not linger forever
• Optional view limits can end access earlier
• Expired and deleted clips, related version history, and orphaned files are removed by cleanup jobs

Residual copies may exist briefly in caches or database journals until cleanup completes. See our Security page for the threat model and encryption options.

Cookies

We use essential cookies required for the product to work:

• Legacy PIN unlock cookies — for older PIN-gated clips, after a correct PIN grants access to that clip for about 24 hours
• Owner cookies — after proving clip ownership, remembers owner access for about 30 days

Passphrase E2E unlock happens only in your browser (session storage on your device); we never receive the passphrase. Essential cookies are httpOnly where applicable, use SameSite=Lax, and are marked Secure on HTTPS. We do not use non-essential cookies, so no cookie consent banner is shown.

Analytics

We do not run analytics or advertising trackers on Webklip.

Sharing and processors

We do not sell personal data. We may use infrastructure and tooling needed to run the service (for example hosting, and Umami when analytics is enabled). Those providers process data only to provide their service to us.

We may disclose information if required by law, or to protect the service, users, or others from abuse or security threats.

Your rights (EEA / UK and similar)

Depending on your location, you may have rights to:

• Access personal data we hold about you
• Request deletion or correction where applicable
• Object to or restrict certain processing based on legitimate interests
• Lodge a complaint with your local supervisory authority

To exercise these rights for the public Webklip service, email contact@logimaxx.ro. Clip content shared via link is available to anyone with that link until the clip expires or is deleted; choose passphrase end-to-end encryption for sensitive material.

Children

Webklip is not directed at children under 16. If you believe we have collected personal data from a child, contact us and we will delete it.

International transfers

Depending on where the service and any analytics tooling are hosted, data may be processed in the European Union or another country. Where required, we use appropriate safeguards for cross-border transfers.

Changes

We may update this policy as the product changes. The “Last updated” date at the top will change when we do. Continued use after an update means you accept the revised policy.

Contact

Privacy questions and data requests: contact@logimaxx.ro.