Privacy Policy

Last updated: September 2026

What Pluks collects

Pluks never collects the text you copy or type. Clipboard history and saved drafts live only in a local database on your device. The desktop app and website may send the optional anonymous telemetry described below. The website also stores information you deliberately submit through a download, early-access, feedback, or purchase flow.

How the desktop app works

The Pluks desktop app monitors mouse activity locally on your device to detect when you select text. When a text selection is detected, it simulates a copy operation and saves the result to a local SQLite database stored in your application data folder. This database never leaves your computer.

Passwords stay out of history. On macOS, before every capture, Pluks asks Accessibility for the role and subrole of the focused element. If either is AXSecureTextField — the marker every standard password input on macOS carries, including Safari and Chrome logins, the system unlock prompt, and password managers — Pluks does not simulate a copy, does not read the clipboard, and stores nothing in history. On both macOS and Windows, content that a password manager flags with the standard concealed-clipboard conventions (org.nspasteboard.ConcealedType, ExcludeClipboardContentFromMonitorProcessing, CanIncludeInClipboardHistory=0) is never read or stored. Equivalent focused-field detection for Windows (via UI Automation) is planned; until it ships, the concealed-clipboard convention is the Windows safeguard.

Draft Recovery (optional, Pro)

Draft Recovery keeps a copy of what you're typing so a mis-delete, a closed window or a chat box that swallowed your message can be undone. It is off by default and only runs on macOS after you turn it on and agree to the points below.

• No keystroke logging. Pluks notices that a key was pressed — as one of a few classes such as "typing", "delete" or "enter" — never which key. After you pause, it reads the text of the field you're typing in once, through macOS Accessibility.
• What's saved, locally: that text, the app's name, the window title and, in browsers, the site's domain (never the full address). It lives in the same local database as your clipboard history and is never uploaded, never included in analytics, and never included in crash reports.
• What's skipped: password fields, anything typed while macOS Secure Input is on (password prompts, Terminal's Secure Keyboard Entry), password managers, terminals, code editors, very short text, text that looks like a key or card number, and any app you block.
• How long: drafts delete themselves after 30 days by default (1 or 7 days are available), and you can delete any draft, or all of them, at any time. Deleted drafts are zeroed on disk.
• Browsers and Electron apps: to read text inside Chrome, Slack, Discord and similar apps, Pluks asks them to expose their text to Accessibility, which can cost those apps a little CPU. Pluks turns this back off when you disable Draft Recovery or quit.
• Private windows: Accessibility can't tell a private/incognito window from a normal one. Pause Draft Recovery from the menu bar, or block the browser, when that matters.

Payments (Pluks Pro)

Pluks is free. Pluks Pro is an optional one-time purchase. Payments are processed by Razorpay; we never see or store your card or bank details.

• We store your email address, the Razorpay order and payment IDs, and your license, on Google Cloud, to deliver your key, let you re-send it, and handle refunds.
• Your key is emailed from the maintainer's inbox — no marketing list.
• The desktop app contacts the license server only to pick up your key right after checkout and, about once a month, to check that the purchase wasn't refunded — sending a random claim token or your license ID, nothing else. If it can't reach the server, Pro keeps working.

Analytics & error reporting

Pluks uses two services to collect anonymous, opt-out telemetry: PostHog for usage analytics and Sentry for error and crash reports. Both are sent against an anonymous UUID generated locally on first run — there is no account, no email, no device fingerprint.

What we send

• Event counts: panel opens, history clicks, smart-paste use, search use, downloads.
• Coarse properties: app version, OS and major version (e.g. macOS 14, Windows 11), locale, screen size.
• Bucketed selection length (e.g. 11-100, 101-1000) — never the value.
• Error type, stack trace, and a hash of the error message.

What we never send

• The text you copy, select or type — ever, anywhere. Saved drafts, window titles and app names never leave your device.
• The websites you visit, page titles, page content, or hostnames.
• Your name, email, IP-derived location finer than country, or any device identifier.
• Tokens, passwords, file paths, or anything that pattern-matches a secret.

How to opt out

• Desktop app: click the ⚙ in the panel titlebar → toggle "Send anonymous usage stats" and "Send crash reports".
• Website: enable "Do Not Track" in your browser, or append ?opt_out=1 to any pluks.app URL once.

Website forms

When you request a download on pluks.app we ask for your email address and what best describes your work. When you request early access to an experimental feature, such as cross-device clipboard access, we ask only for your email address. Here is exactly what happens with it:

• It is stored in a private spreadsheet accessible only to the maintainer — never sent to PostHog, Sentry, or any ad or enrichment service.
• You get two automated emails, total: your download link right away, and a single how's-it-going check-in about two days later. After that, only occasional release notes — and every email has a one-click unsubscribe that is honored immediately.
• Rating links in the check-in email carry a random ID, not your address.
• An early-access request gets one confirmation email. We may contact you once if a real beta becomes available; it does not enroll you in the download email sequence.
• Want the record gone entirely? Email parth.dixit@alumni.iitd.ac.in and it will be deleted.

Clipboard and draft data storage

Clipboard history and saved drafts are stored exclusively on your device — a SQLite database in your local application data folder. You can clear history and drafts at any time from within the app. Website form submissions and purchase records are stored separately as described above.

Changes to this policy

If this policy changes, the updated version will be posted at pluks.app/privacy.html with a revised date.

Contact

Questions? Email us at parth.dixit@alumni.iitd.ac.in, or use the feedback button on this page.