Shelfclip

Privacy

Last updated 26 September 2026

Shelfclip reads what you copy so it can organise it for you. That makes privacy the product, not a footnote. This page says exactly what stays on your devices, what reaches our servers, and what we never do.

What never leaves your device

  • Sensitive copies. Passwords marked by password managers, API keys, private keys, one-time codes, card numbers and ID numbers are detected on your Mac or iPhone, kept only on that device, and deleted after one hour. Our servers check again and refuse anything that slips through.
  • Images and files you copy stay on the device where you copied them.
  • Searching, pasting and browsing your history work without a connection and send nothing.

What reaches our servers, and why

  • Text clips (not sensitive, not images or files) are uploaded so Shelfclip can decide whether they are worth keeping, put them on a shelf, tag them, and sync them to your other devices.
  • Links: we fetch the public page to read its title and description. That public metadata is cached and reused for anyone who saves the same link; the fact that you saved it is not shared with anyone.
  • Your account: your email address, used to send sign-in codes. You can use Shelfclip on one Mac without an account; we then know only an anonymous id.
  • Your plan: whether you are on Free, Pro or Lifetime, and the subscription id from the store you paid through.

Where it runs

Our servers run on Cloudflare. Each account's clips live in their own isolated storage object. The AI that sorts and tags clips runs on Cloudflare Workers AI and Cloudflare AI Gateway; clip text is sent there to be processed and is not used to train models. Search by meaning uses Cloudflare Vectorize. Sign-in emails are sent with Cloudflare Email Service.

Payments

Purchases on the web and in the Mac download are handled by Polar, our merchant of record; purchases in the iPhone and Mac App Store apps are handled by Apple. We never see or store your card details.

AI assistants you connect

If you connect an assistant (for example Claude or Cursor) to Shelfclip, it can search and read your clips. It can save or delete clips only if you ticked that permission when you approved it, and it can only delete clips it saved itself. You can see which clips an assistant saved on the “From agents” shelf.

What we never do

  • Sell your data or show you ads.
  • Use your clips to train AI models.
  • Put analytics or tracking scripts on this site or in the apps.

Deleting your data

Delete a clip and it is deleted everywhere. Delete your account (Account → Delete account, in the Mac or iPhone app) and every clip, tag and search index entry on our servers is erased, along with the library on that device. If you pay through Polar, the subscription is cancelled first; App Store subscriptions have to be cancelled in your Apple ID settings.

Contact

Questions or requests: support@shelfclip.com.