Privacy

Short-link paths and destinations remain in Redis. Clipboard clients encrypt relay text, edits, messages, history, attachment names and bytes. Unlocked HTTP requests intentionally allow readable context and small edits; a connected client supplies its copy. The server handles the readable response in request memory, with encrypted request/reply buffers. The relay never needs a content key. It retains encrypted delivery frames for at most thirty seconds, not a recoverable document snapshot.

Board descriptors, public device keys, signed permissions, encrypted key-delivery packages and membership records expire after seven inactive days. Each admitted device has its own seven-day renewable membership expiry. The relay signing key is server-side authentication material and persists independently. Challenge records last thirty seconds; IP-hashed abuse counters last up to two minutes.

The relay and hosting infrastructure see IP addresses, timing, traffic sizes and routing information. An unlocked HTTP read exposes the returned context to the server and the reader; locking disables that path. Board pages omit third-party analytics and use a no-referrer policy. This is content privacy, not anonymity. Application code does not log request/response bodies or keys. HTTP content responses use no-store; readable documents and the HTTP request-scoped decryption keys are not written to Redis. Infrastructure may retain access metadata.

Browsers save up to thirty local copies for seven days, including attachments and secret keys. Local storage can be cleared or evicted. Exports contain readable content. Agent helpers persist a private local state file; their environment and AI provider become recipients when granted access.

Approved participants can retain and forward content. Revocation rotates future encryption keys but cannot erase received copies. Hosted web clients trust site-delivered code and their own devices. A separately distributed client can reduce reliance on later site code changes. Questions go to hi@manglekuo.com.