Privacy policy

Effective 2026-05-18

ClipVault is a Chrome extension that keeps your most-used text, images, files, and videos one keystroke away. We built it as a local-first tool. This page documents, in plain English, exactly what data the extension touches.

What we collect

Nothing. ClipVault collects no personal data, no analytics, no telemetry, and no crash reports. There is no account system because there is nothing to associate to an account.

Where your snippets live

Snippets — text, images, files, and videos — are stored in your browser's local IndexedDB database, on your own machine. The unlimitedStorage permission signals to Chrome that the database may grow past the default 10 MB quota as your library grows. The bytes never leave your computer.

Network requests

ClipVault makes zero outgoing network requests. You can verify this yourself: open Chrome DevTools on the extension popup or options page, go to the Network tab, and use the extension. The list stays empty. No third-party SDKs, no fonts loaded from a CDN, no analytics beacons.

Permissions explained

• storage — stores your settings (theme, locale, sort order) using chrome.storage.
• unlimitedStorage — lets IndexedDB grow past 10 MB so a working library of images and videos fits.
• contextMenus — adds the right-click "Save to ClipVault" menu entry.
• scripting — injects the paste logic into the active tab when you click a snippet.
• activeTab — gives the extension access to the currently focused tab when you invoke ClipVault, for inserting into the focused field.
• host: web.whatsapp.com — to inject the Insert button next to the WhatsApp Web composer for one-click file attach.
• host: mail.google.com — same purpose for Gmail compose.

Third parties

None. No third-party services are contacted, no third-party libraries phone home, no fonts are fetched from Google or anywhere else.

Cookies

None.

Children

ClipVault is not directed at children under 13. We don't collect any data from anyone, including children.

Changes

If we ever add an optional cloud-sync feature, it will be strictly opt-in and accompanied by an updated version of this policy that explains what is uploaded and where. The default forever is local.

Contact

Questions, security reports, or bug reports: dayanimo@gmail.com.